Skip to main content

13. The audit trail

The audit trail (/audit) is a permanent record of important events. It is append-only: entries can be added, but not changed or deleted. Each entry is linked to the one before it, so tampering would show.

Who can see it: PSA, CSA and Auditor / Compliance.

What it records (examples)

  • Staff invitations and invitation acceptances (STAFF_INVITATION_ACCEPTED).
  • Changes to security policy, escalation service levels and early-warning thresholds.
  • Withholding tax changes (INVESTMENT_SCHEME_TAXATION_UPDATED).
  • Finance decisions, transactions and case changes.

Steps to look up an event

  1. Open Audit trail from the Administration group.
  2. Use the search box and the Filter by status control to narrow the list.
  3. Click Record details to read the full entry.
  4. To keep a copy, click Export CSV, or generate the Audit trail report from Reports. Report generation needs two-step security.

Common problems

  • You cannot edit or delete an entry. This is by design. Explain the correction in a new record instead.
  • An event you expected is missing. Check the date filter and the scope of your role. Then ask an administrator.