Auditing your Redox platform

For any organization handling sensitive data, maintaining a clear and comprehensive audit trail is not just a best practice—it’s often a requirement for security compliance (like HIPAA and SOC 2). Our audit events provide a complete record of all significant actions taken within your Redox organization.

• Answer "who did what, and when?": Securely log all user activity, from viewing a log containing PHI to changing a user’s permissions.
• Monitor for security risks: Proactively track events like failed login attempts or unauthorized access to confidential data.
• Troubleshoot issues: See a step-by-step history of configuration changes to understand how and when a problem occurred.
• Automate compliance: Use the Redox Platform API to programmatically pull audit events into your own security and compliance monitoring tools. Review the Get audit events spec.

Auditing is an advanced feature. Once you’ve upgraded your plan to include this advanced feature, auditing is available to Redox organization owners.

Our auditing feature tracks two major categories of events:

1. User activity: An action a user takes that could affect your organization’s configuration or assets.
2. User access: An action a user takes related to user accounts and permissions.

For example, you can track who:

• creates, updates, or deletes any connectivity settings (e.g., OAuth API keys, sources, or destinations);
• views or modifies any data operations (e.g., translation sets, filters, config modifiers); and
• views or searches logs, as well as runs log inspector.

For example, you can track when a user:

• logs in or switches between Redox organizations;
• invites a new user to join the organization; and
• changes another user’s role assignment.

When you review audit events, they’ll have an associated status, which could be any of the following: