Audit trail and logs

Security-relevant and data-changing events: sign-ins and failures, permission and role changes, employee record changes, salary changes, payroll approval and publication, attendance locks and unlocks, exports, and file access.

Each entry records who, what, when, from which address, and — where a value changed — what it was before and after.

Audit entries are append-only. They cannot be modified or selectively deleted from the product, including by an account owner, because a log that the administrator can trim proves nothing.

Unlocking a locked attendance period is recorded as a critical event for the same reason.

Filter by person, date range, action or entity, and export the result. When an auditor asks who changed a salary in March, this is the answer.