An audit trail that cannot be edited or deleted

What is recorded

Why append-only matters

Many systems keep logs in an ordinary table that an administrator can tidy up. Stowbill's activity trail is enforced as append-only in the database. New entries can be added. Existing entries cannot be updated or deleted. If someone asks whether the log has been altered, the answer does not depend on trusting a person.

Hash chaining

Each entry stores a hash of the previous entry, forming a chain. The Activity page re-verifies the chain, so an entry that was edited, deleted or inserted out of order breaks it and is flagged. This covers the engagement, files and data room trails. It makes tampering detectable; it does not stop someone with database access from trying.

Using the log

• See each item's full history on its own page, or the whole firm's on one screen.
• Export to Excel for a partner review, an inspection or a client query.
• Answer questions such as "who downloaded the draft accounts before release?" in minutes.

Where it helps

• Quality reviews and regulator inspections of audit files.
• Deal files where the firm needs to show who saw sensitive information and when.
• Internal investigations of a leaked or misplaced document.

What it covers, and what it does not

The log covers your firm's users and outside guests in a data room. Per-party reports show views, downloads, documents opened and last activity for each buyer, with Excel export. Time spent on each page is not tracked yet.

Questions