In this article
The audit log records access to and changes of sensitive data: opening medical records, changing patient data, signing visits, posting journal entries, changing roles, confirming AI actions, and emergency access by Medivana staff.
Viewing the audit log
- Settings → Audit log (permission "View audit log").
- Filter by data type, data ID, action, or user.
- Each entry shows the time, user, actor type, action, data, IP address, and branch.
Cannot be changed
The audit log is append-only and hash-chained: every entry is linked to the previous entry. Use Verify to check the integrity of the chain; an "intact" result means no entry has been changed or deleted.
Emergency access by Medivana staff (break-glass)
Medivana staff cannot see your clinic's data, except to handle an incident using the emergency procedure: with a stated reason, read-only, valid for at most 1 hour, and recorded in your audit log with the actor type "break_glass". The clinic is notified afterwards.