Security and governance

Audit logging

A tamper-evident record of who did what.

Converge records security-relevant operations in an audit log.

What is recorded

Each entry records the actor, their roles, the operation, the resource, the decision (allowed or denied) and details. Examples include applied actions, approvals, source queries (with the SQL truncated), exports and write-backs, model catalog changes, and Decisions API calls (with a hash of the state rather than the state itself).

Tamper evidence

Every entry is appended to a hash chain: each entry includes a hash of the one before it. Changing or removing an entry breaks the chain, and verification reports where.

When personal data must be removed, an entry can be redacted without breaking the chain.