Glossary
Audit Trail
An immutable, append-only log of every action taken on the system — the canonical record of who did what, when.
Audit Trail
An audit trail (or audit log) is the system's append-only record of every action taken. In Papyrus, the audit trail captures:
- Every document action (upload, view, edit, share, delete, restore)
- Every workflow action (start, advance, approve, reject, complete)
- Every permission change (grant, revoke)
- Every authentication event (login, MFA, password change)
- Every configuration change (retention policy, tenant settings)
Each entry contains: timestamp (UTC), actor (user), action, resource, before/after state (where applicable), IP, device, and the hash of the previous entry (forming a chain).
The audit trail cannot be modified by any user, including PlatformAdmins. It is the canonical source of truth for “what happened, when, who did it”.