The audit log

What Tallify's audit log records (every change, sign-in, document opened and script run), who can read it, and how to get an extract for a compliance review.

Every request that changes something is written to the audit log with the user, the method, the path, the outcome and the time. Opening a client's documents is written there too, with the client: a draft or filed record of advice, an ID or FICA document, a fact find, an Astute report, a signed disclosure letter, or the client's list of documents. Sign-ins, sign-outs, failed sign-ins and rate-limit blocks are recorded with the source address. Automated callers (the worker, the mail service, scheduled jobs) are named as the caller and the adviser they acted for, so a filing made by email reply shows the adviser, not the mailbox.

Reading it

The Audit view is open to Tallify's support sign-in. When a compliance officer or the regulator asks for evidence, ask Tallify for an extract of the full log; it is also part of each client's readable file in the backups.

Together with

The Activity feed holds the exact text of every drafted, approved, rejected and sent communication; the advice registers hold every version of every document. The three together answer "who did what, when, and what did the client receive".