# Audit Logging Policy – TechStackBase

## Purpose
To ensure traceability, accountability, and compliance with ISO 27001 and POPIA.

## Scope
All administrative and system actions affecting user or company data.

## Logged Events
- Authentication events
- User management actions
- Company management actions
- Subscription and module changes

## Log Contents
- Actor identity
- Target identity
- Action type
- Timestamp
- Source IP and environment context

## Immutability
Audit records are append-only and protected against modification or deletion.

## Retention
Audit records are retained for a minimum of five (5) years.

## Access Control
Audit logs are accessible only to authorised roles.

## Incident Response
Audit logs are used as the primary forensic source during security incidents.
