Volition keeps a complete audit trail. The Audit Log under Settings, System records every change — who did what, to which record, and when.
Click any event to see the details, including a field by field diff of what changed. Filter by date range, action, or resource, and export to C.S.V.
Auth Events tracks every login, M.F.A. check, and password reset — successes and failures, with the source I.P.
The P.H.I. Access log answers a different question — not who changed a record, but who viewed one, including any break glass access.
And Data Exports records bulk data leaving the system — P.D.F.s, C.S.V. downloads, and bulk emails, with the recipient and size.
Together they cover the compliance questions — what changed, who logged in, who looked, and what left.
The audit trail is always on — every mutation, login, PHI view, and export is recorded automatically. These pages are read-only and admin-gated.