Audit trail

The work on the advice, on a tamper-evident log.

Each step is written with who did it and when, and sealed to the entry before it.

What gets written

The steps on the advice, from first draft to sign-off.

Each entry holds what happened, when, who did it, their email and the address they worked from.

audit log · drafting
  1. Engagement created
  2. Licensee changedFrom one licensee to another, both recorded
  3. Generation started
  4. Section edited
  5. AI edit
  6. Last edit undone

Creating, editing and generating the advice, including edits made by asking the AI and edits made to a table cell.

Illustrations using the specimen client.

How the seal works

Change an entry or remove one, the next check shows it.

1Generation startedD. Whitford · 09:14seal a7f3
points at seal a7f3
2Figure fixed$186,000 → $742,000seal 19ce
points at seal 19ce
3Comparison confirmedD. Whitford · 10:51seal e05a
Integrity check: the chain verifies

Step 1 of 3 · a changed entry

Each entry carries a seal made from its own contents and the seal before it.

The seal covers what happened, when, who did it, the details and the seal before it. BackPro uses HMAC-SHA256 with a key held on its servers.

Illustration. Seals are shortened.

Checked every day

The chain is verified without anyone asking.

BackPro checks the whole chain every day on its own, and on BackPro Practice you can run the check yourself at any time.

Automatic check, once a day

Mon✓
Tue✓
Wed✓
Thu✓
Fri✓
Sat✓
Sun✓

Each check also records a signed checkpoint of where the chain ended, so rows cut off the end are caught too.

On your dashboard

Compliance audit log verified · 18,240 records

Or run it yourself

Integrity Check on the Audit Log walks every entry and reports how many records it verified.

Illustration. The record count is an example.

For your licensee or an audit

Something to hand over when someone asks.

Export with its integrity result

CSVaudit-log.csvverified
JSONaudit-log.jsonverified

Each export carries the result of an integrity check run at the time, up to 100,000 entries per export.

Sign-off kept as evidence

Evidence · attestation

Advice review sign-off, BP-REV-Donnelly-1

RG 104 monitoring and supervision

When the licensee approves an advice review, the approval is filed as an evidence item.

Kept for seven years

Written7 yearsArchived

After seven years, by default, entries are marked archived. They are not deleted.

Plainly

What the log records, and what it does not.

Recorded

  • That an edit happened, who made it and when
  • The before and after of a fixed figure
  • Each move of an advice review, with the reason
  • Draft downloads and delivery to the client portal

Not recorded

  • The text of an edit. The log says a section was edited, not what changed
  • Downloads of the final Word, PDF or presentation
  • A guarantee. Entries are written alongside the work, and if a write fails the error is logged and the work carries on

Entries are written on every plan.

The Audit Log screens, the integrity check and the export come with BackPro Practice.

Compare plans

Changing a sealed field or removing an entry breaks the chain, and the next integrity check shows it.

No. It records that a section was edited, by whom and when. Figure fixes are the exception: they record the figure before and after.

Not on their own. The seal uses a key held on BackPro’s servers, so the integrity check runs in BackPro. Your licensee can have an export with its integrity result.

Seven years by default. After that they are marked archived, not deleted.

Entries are written on every plan. The Audit Log screens, the integrity check and the export are in BackPro Practice, for people with permission to read the audit log.

Run your next SoA through BackPro.

Start free and check your first SoA today. Not ready? Run the check on our sample SoA first, no sign-up needed.