Tamper-evident by default
Every event is hashed into a chain and sealed periodically. Verification is a single API call your auditor can run themselves.
Append-only, hash-chained event streams your customers' compliance teams can self-serve — with a viewer you drop into your product tonight.
Every event is hashed into a chain and sealed periodically. Verification is a single API call your auditor can run themselves.
An embeddable, themeable log explorer with actor, resource and org filters. Zero support tickets for evidence requests.
Splunk, Datadog, S3 and generic webhooks. Backfill historical ranges without throttling your live stream.
Field-level masking rules applied at write time so PII never lands in the immutable store.
Declare event types once, get typed clients, validation and stable docs for downstream consumers.
Per-tenant retention windows and legal holds that survive deletion requests without breaking the chain.
await bb.audit.write({
action: 'invoice.approved',
actor: { id: usr.id, type: 'user' },
target: { id: inv.id, type: 'invoice' },
org: org.id,
meta: { amount: 42000, currency: 'USD' },
})
// -> { id: 'evt_8fa2', seq: 190244, hash: '9c1e…' }