01 / AUDIT

Audit Logging

Append-only, hash-chained event streams your customers' compliance teams can self-serve — with a viewer you drop into your product tonight.

99.99%
ingest uptime
<80ms
write p99
7yr
immutable retention
SOC 2
evidence on tap

Tamper-evident by default

Every event is hashed into a chain and sealed periodically. Verification is a single API call your auditor can run themselves.

Drop-in viewer

An embeddable, themeable log explorer with actor, resource and org filters. Zero support tickets for evidence requests.

Streaming export

Splunk, Datadog, S3 and generic webhooks. Backfill historical ranges without throttling your live stream.

Redaction policies

Field-level masking rules applied at write time so PII never lands in the immutable store.

Schema registry

Declare event types once, get typed clients, validation and stable docs for downstream consumers.

Retention controls

Per-tenant retention windows and legal holds that survive deletion requests without breaking the chain.

Wired in one afternoon

  • Single write endpoint
  • Typed SDKs for TS, Go, Python
  • Embeddable viewer component
  • Verifiable hash chain export
santati · audit.write
await bb.audit.write({
  action: 'invoice.approved',
  actor:  { id: usr.id, type: 'user' },
  target: { id: inv.id, type: 'invoice' },
  org:    org.id,
  meta:   { amount: 42000, currency: 'USD' },
})

// -> { id: 'evt_8fa2', seq: 190244, hash: '9c1e…' }

Ship audit logging this quarter