Provable. Tamper-evident.
Audit-ready.
Enterprise-grade logging that doesn't just record what happened — it cryptographically proves it. A hash-chained ledger means no entry can be quietly altered or erased, not even by us.
prev_hash
0x00000000
entry_hash
SHA-256 · HMAC
prev_hash
0xa7f3…91c
entry_hash
SHA-256 · HMAC
prev_hash
0xa7f3…91c
entry_hash
SHA-256 · HMAC
each entry chains the hash of the one before it — break one link and the whole chain fails verification
Built for Scrutiny
Logging your auditors can trust
From cryptographic integrity to role-gated exports, every part of the trail is designed to stand up to a compliance review.
Tamper-evident hash chain
Every entry hashes the one before it with SHA-256, then signs the result with HMAC-SHA256. Alter a single record and the chain breaks — detected the moment an auditor verifies it.
Fail-closed on high-risk actions
Password changes, account recovery, and policy edits use blocking, synchronous writes. If the audit record can't be written, the entire transaction rolls back. No action goes unlogged.
Correlation across every layer
A single correlation ID follows each request through the API, the client, and async jobs — so you can reconstruct exactly what happened, in order, across the whole system.
Real-time threat detection
Failed-login spikes, IP-block surges, geographic anomalies, and session-hijack signals are monitored continuously and surfaced as alerts before they become incidents.
Device trust & session integrity
Trusted devices are fingerprinted and bound to sessions. An IP change or user-agent mismatch raises a security event, and per-plan device limits keep the trust surface tight.
Export for auditors
Stream the full trail to CSV or JSON for compliance reviews. Access is role-gated — only admins and designated compliance auditors can export, and every export is itself logged.
Total Coverage
95+ action types, five streams
Every meaningful event is captured and categorized — so nothing of consequence happens off the record.
Authentication
login, logout, MFA challenge
Authorization
access granted / denied
Data Access
item opened, vault viewed
Data Mutation
create, update, delete
Admin & Organization
policy and role changes
Retention & Visibility
Keep your trail as long as you need
Retention windows and visibility scale with your plan — up to a seven-year, organization-wide, exportable archive for regulated industries.
| Plan | Retention |
|---|---|
| Free | 30 days |
| Premium / Developer | 90 days |
| Family | 1 year |
| Team | 1 year |
| Business Enterprise | 7 years |
| Enterprise Enterprise | Unlimited |
Expired records are purged automatically by scheduled jobs, honoring each organization's configured retention policy.
Prove it — to your auditors, your board, and yourself
Bring tamper-evident, enterprise-grade logging to your organization. Talk to our team about compliance.
Talk to Sales