Attestly
Home/Docs

Documentation

Audit log

Append-only, tamper-evident record of every action in your tenant.

Last updated May 6, 2026

Every action that affects compliance state is recorded. The log is append-only and tamper-evident.

What's logged

  • User events: sign in, sign out, role change, GitHub re-auth.
  • Repo events: connected, disconnected.
  • Scan events: requested, started, completed, failed.
  • Document events: generated, approved, published, archived.
  • Subprocessor events: added, modified, removed.
  • DPA events: signed, version diff sent.
  • Webhook events: delivered, failed, replayed.

Tamper evidence

Each entry includes the SHA-256 of the previous entry, forming a hash chain. The current head hash is published on your trust center at /audit-head.txt. If anyone modifies an entry, the chain breaks and any verifier (including auditors) can detect the modification.

Retention

13 months by default. Extendable to 7 years on Enterprise.

Export

Settings → Audit Log → Export. CSV, JSON, or PDF. The PDF includes the head hash and a signed (Ed25519) verifier you can include in audit responses.

Programmatic access

curl https://api.attestly.dev/v1/audit \
  -H "Authorization: Bearer $ATTESTLY_API_KEY" \
  -G --data-urlencode "since=2026-01-01"

Returns NDJSON, one event per line. Paginate with the next cursor in the last line of each page.