Every change is recorded in an append-only audit log that can prove it has not been altered. Security settings for classified environments are managed from one admin panel.
Each audit entry records the actor, the action, the time and the before and after values of the change. Filter by project, user, action or date range and export the result to CSV as evidence.
Each entry includes the SHA-256 hash of the one before it. Verifying walks the whole chain and reports any entry that was changed or removed after the fact.
Administrators set classification banners for the top and bottom of every screen, a notice-and-consent gate shown before login, and a session inactivity timeout, all from the Security & Compliance panel.
