Operation and sign-in audit
Sensitive actions leave a trail, written asynchronously so the main path is not blocked, correlatable with traceId.
What is recorded
| Category | Typical events |
|---|---|
| Permission changes | grant, revoke, role change |
| Data deletion | delete and batch delete |
| Data export | export and download |
| Sign-in activity | sign-in success / failure, sign-out, code sent |
Fields
Every record traces back to who, when, from which IP, and which traceId. With the traceId you can go from one audit record back to the complete log of that moment.
Performance
- Audit entries are written asynchronously and never block the main path.
- Sign-in logs and operation logs are separate, so they can be retained and cleaned independently.
Masking
Phone numbers and password fields are masked by default in logs and audit records. Access logging has a single print site, so no plaintext is emitted from several places.
Last updated 2026-10-09Edit this page →