Security
Audit logging
Tamanor writes an append-only, tenant-scoped audit log; actor references use a SetNull lifecycle so history survives user removal, and tokens are never logged.
Append-only, secret-free
Meaningful actions are recorded append-only and scoped to the tenant. Actor references use a SetNull lifecycle so removing a user does not erase the historical record. No token, password or connection string ever appears in an audit entry.
Frequently asked questions
- Do audit entries ever contain tokens?
- No — secrets are scrubbed; the audit log never contains token material.