Audit Log Security: Uneditable by Design

In an era where data integrity and privacy are paramount, we have engineered our audit log to be uneditable, even by us. This approach ensures that our users can trust the accuracy and security of their data. By implementing a database trigger that blocks UPDATE and DELETE operations on content columns, we prevent any unauthorized changes, while still allowing GDPR-compliant actions like anonymization.

How Does an Append-Only Audit Log Work?

An append-only audit log is a system where entries can only be added, not modified or deleted. This is achieved through a database trigger that blocks any UPDATE or DELETE operations on the content columns of the audit log. This means that even if an application account is compromised, the history cannot be rewritten. The integrity of the log is maintained, ensuring that all actions are accurately recorded and preserved.

GDPR Compliance: Balancing Privacy and Integrity

Our GDPR compliance strategy is comprehensive, addressing key articles such as 15, 17, and 20. For Article 15 and 20, we provide data export capabilities that exclude sensitive information like password hashes, Cognito subjects, TOTP secrets, and key hashes. This ensures that while users can access their data, critical security elements remain protected.

Article 17: Right to Erasure

When a user requests erasure under Article 17, we execute a transaction that nulls actor references, deletes sessions, and anonymizes the user row. This process ensures that personal data is effectively removed while maintaining the integrity of the audit log.

Retention Policies: Data-Driven, Not Code-Driven

Our retention policies are implemented as data rather than code. This approach allows for greater flexibility and adaptability, ensuring that we can respond to regulatory changes swiftly and efficiently. By managing retention policies as data, we can easily adjust timelines and criteria without altering the underlying codebase.

Cookie Consent and Privacy

We prioritize user privacy by ensuring that our cookie consent mechanism is robust and transparent. We do not use any third-party trackers, which means that users can trust that their data is not being shared with external entities. This commitment to privacy is a cornerstone of our data protection strategy.

Transparency Over Certifications

While we do not hold SOC 2 or ISO 27001 certifications, we believe that transparency is more valuable than a badge. We offer a detailed security questionnaire response that outlines our security practices and measures. This approach allows us to provide a clear and honest account of our security posture, fostering trust with our users.

For more detailed information on our data protection and privacy practices, please visit our legal pages.