Compliance & security
Audit log, retention, vendor register and policies.
The compliance area is for everyone who has to answer questions before rollout — privacy, IT security, procurement.
Audit log
Security-relevant changes are logged with timestamp, actor, changed fields and before/after state — completely and tamper-proof.
Retention and deletion
- Retention periods per data type, enforced automatically.
- Deletion requests for individuals, documented and traceable.
- Data export for subject access requests.
Documents
- Policies and emergency runbooks, versioned.
- Vendor register with purpose and location.
- Access reviews.
The public trust center summarises the key statements for external parties, no login required.