Compliance & Data Governance
Complete audit trail for SOC 2, GDPR, HIPAA compliance. Risk scoring, compliance reports, unlimited audit retention—compliance out of the box.
Complete audit trail with risk scoring—filter by user, action, date range for SOC 2, GDPR compliance
Everything you need for compliance
Complete audit trail, risk scoring, compliance reports, unlimited retention—SOC 2, GDPR, HIPAA ready.
Complete Audit Trail
Every admin action logged (org changes, user management, SSO config, secret access). Request context captured (IP, user agent, session ID, device info) for forensic investigation.
Risk Scoring
Automatic risk score (0-100) for every audit event. High-risk actions (failed logins, secret access, bulk operations) scored 70+. Prioritize security incident response.
Advanced Filtering
Filter audit logs by user, action, auth method, result, resource type, date range, risk score. User timeline view for forensic analysis. Fast investigation of security incidents.
Compliance Reports
Generate compliance reports for date range. Export to CSV (redacted and unredacted). Streaming export for large datasets—low memory footprint.
Unlimited Retention
Audit logs kept forever (no 90-day limit). Soft-delete with 30-day restore window. GDPR-friendly data retention and recovery.
Data Classification
Three classification levels (internal, confidential, restricted). Auto-classification based on action type. GDPR Article 32 compliance.
Why teams choose Fastero for compliance
SOC 2, GDPR, HIPAA ready. Security incident response. Data governance.
SOC 2, GDPR, HIPAA Ready
Complete audit trail for regulatory compliance. Every admin action logged with request context. Compliance reports with one click (date range, CSV export). Soft-delete with TTL for "right to be forgotten".
Security Incident Response
Risk scoring (0-100) for prioritizing high-risk events. Filter by failed logins, secret access, bulk operations. User timeline for forensic investigation. Failed login tracking and account lockout detection.
Least-Privilege Audit Access
Owner/Admin can view all audit logs. Members with audit:read capability can view logs. Export requires audit:export or audit:exportUnredacted capability. IAM policy support for fine-grained access control.
Data Governance
Data classification (internal, confidential, restricted). Soft-delete with restore (30-day retention). Unlimited audit log retention (no 90-day limit). Compliance flags (ADMIN_ACTION, SECURITY_CRITICAL, DATA_EXPORT).
Audit Event Processing
Action Captured
Every admin action recorded (org changes, user management, SSO, secret access). Request context captured (IP, user agent, session ID).
Risk Assessed
Automatic risk score calculated (0-100). High-risk actions (failed logins, secret access, bulk delete) scored 70+. Compliance flags added (SECURITY_CRITICAL, ADMIN_ACTION).
Logged & Alertable
Audit log stored with unlimited retention. High-risk events (70+) logged to console for real-time alerting. Export to CSV for compliance reporting.
How it works
View audit logs. Generate compliance reports. Investigate security incidents.
View Audit Logs
Filter audit logs by user, action, date range, risk score. See all admin actions with request context (IP, user agent, device info). User timeline for forensic investigation.
Generate Compliance Reports
Select date range, click "Generate Report". Export to CSV (redacted or unredacted). Share with auditors for SOC 2, GDPR compliance.
Investigate Security Incidents
Filter by high-risk events (risk score 70+). Review failed logins, secret access, bulk operations. User timeline shows all actions by specific user.
Real-world use cases
Security/Compliance
SOC 2 Audit Preparation
Auditor requests access logs for Q4. Generate compliance report (Oct 1 - Dec 31), export to CSV. Share unredacted report with auditor. Pass SOC 2 audit with complete audit trail.
Security Analyst
Investigate Failed Logins
Alert: 10 failed login attempts from same IP. Filter audit logs by action "login_failed" and IP address. Identify brute-force attack. Block IP, reset user password.
Data Privacy Officer
GDPR Data Subject Request
User requests all their data (GDPR Article 15). Export user timeline (all actions). Export user data (queries, notebooks). Provide data export to user—GDPR compliant.
Common questions
What audit events are logged?
Every admin action is logged: login/logout, user management (create, update, delete, role change), org changes, SSO configuration, secret access, query execution, trigger actions, payment processing. Request context includes IP address, user agent, session ID, device info.
How long are audit logs retained?
Unlimited audit log retention—logs are kept forever unless manually deleted. Soft-delete with 30-day restore window for GDPR "right to be forgotten". Competitors typically have 90-day limits.
What is risk scoring?
Every audit event gets an automatic risk score (0-100). High-risk actions (failed logins, secret access, bulk operations) scored 70+. Medium-risk (admin changes, SSO config) scored 50-69. Low-risk (normal access) scored 0-49. Filter by risk score to prioritize security incidents.
Can I export audit logs for compliance?
Yes—generate compliance reports for date range, export to CSV. Redacted CSV for general export (removes sensitive metadata). Unredacted CSV for admins (includes full context). Streaming export for large datasets.
Who can view audit logs?
Owner/Admin can view all audit logs. Members with audit:read capability can view logs. Export requires audit:export or audit:exportUnredacted capability. IAM policies support fine-grained access control.
How do I investigate security incidents?
Filter audit logs by high-risk events (risk score 70+). Review failed logins, secret access, bulk operations. User timeline shows all actions by specific user. Export filtered logs for forensic analysis.
Ready to simplify compliance?
Complete audit trail. Risk scoring. Compliance reports. Unlimited retention—SOC 2, GDPR, HIPAA ready out of the box.