Security

Audit logging

Tamanor writes an append-only, tenant-scoped audit log; actor references use a SetNull lifecycle so history survives user removal, and tokens are never logged.

Append-only, secret-free

Meaningful actions are recorded append-only and scoped to the tenant. Actor references use a SetNull lifecycle so removing a user does not erase the historical record. No token, password or connection string ever appears in an audit entry.

Frequently asked questions

Do audit entries ever contain tokens?
No — secrets are scrubbed; the audit log never contains token material.
Audit logging — Tamanor security