Audit & compliance
Every view, edit, and export — with a name on it.
An immutable record of who did what and when, across the whole tenant. Searchable by user, by patient, and by date range, and exportable when someone official asks.
Immutable by design. Entries cannot be edited or deleted, including by administrators.
The record of the record
Who opened this chart, when, from where.
Every view, edit, signature, export, download, and permission change is written to an append-only log. Filter it by user, by patient, by action, or by date, and export what you find.
When you need it
Three questions this answers in minutes instead of weeks.
A patient has the right to an accounting of disclosures. Filter by their MRN and export the result.
Filter by user and action type. Exports and downloads in the final weeks are visible immediately.
Creation, edit, and signature timestamps sit side by side. Amendments are additive, never silent.
Append-only
Nobody can edit the log. Including us, and including your administrator.
A log an administrator can quietly clean up is not evidence of anything. Entries are written once and retained for seven years, which is what makes the record usable in an investigation.
Questions
Common questions.
What does the activity log record?
Every view, edit, signature, export, download and permission change across the whole tenant, each written to an append-only log with the user, timestamp and IP address. You can filter by user, patient, action or date range and export what you find.
Can an administrator edit or delete log entries?
No. Entries are written once and cannot be edited or deleted by anyone, including Unisona Health and your own administrator — a log an administrator can quietly clean up is not evidence of anything. Amendments to records are additive and never silent.
How long are activity records kept?
Seven years, immutable. That retention is what lets the log answer questions like "who accessed my record," "did a former employee take data," and "was this note written after the fact" in minutes instead of weeks.
Works with
It runs on the same record as the rest of the platform.
Audit & compliance
Roles & permissions
A tech, a biller, a clinical director, and an owner should not see the same chart.
Read more →Audit & compliance
42 CFR Part 2 handling
Part 2 protects SUD treatment records more tightly than HIPAA, and it governs what you can disclose, to whom, and with which consent.
Read more →Audit & compliance
Audit response packets
One click produces a paginated response packet with a cover sheet, an index, and every signed record inline.
Read more →Get started
Start today, or take a look first.
Create your workspace in minutes and try the whole platform free for 14 days — no credit card. Or book a one-hour walkthrough first.