Audit Log

An immutable audit trail is a foundational requirement for organizations handling sensitive personal and health-related data under GDPR and Norwegian data protection law. The Audit Log fulfills regulatory obligations by providing evidence of lawful processing, access control enforcement, and incident response capability. It is explicitly mandated for the Global Admin support access flow - every support session must be logged in the organization's audit trail per the source requirements. Without this capability, regulated organizations such as Blindeforbundet and Barnekreftforeningen cannot accept the platform for production use. The log also supports internal accountability and dispute resolution when activity data or administrative actions are contested by any party.

The audit_log_entries table uses append-only semantics enforced at the database layer - no UPDATE or DELETE operations are permitted on this table by any application role. AuditLogService writes entries synchronously within the originating database transaction to guarantee no action goes unlogged even on partial failures. The Next.js admin page renders paginated results with server-side filtering by date range, actor user ID, and action type enum. Entries reference the users table for display names and support deep-linking from the Security Dashboard. PostgreSQL row-level security enforces strict tenant isolation. A typed write interface ensures all application layers emit log entries with a consistent schema, and a log-retention configuration allows per-organization archiving policies.