Audit trail
Audit
by design.
An audit trail on every compliance record: each change timestamped, attributed and exportable, with data resident in your own region and single sign-on.
Audit trail, in the platform
Source Details Obligations Risks Audit Notes
- Regulatory change flagged — Section 3.4 (Enhanced CDD for PEPs) amended by the JFSC; 5 obligations affected
- Approval requested — 5 obligation updates pending compliance sign-off
- Action opened — Update PEP approval procedure for amended Section 3.4
- Obligation approved — 4.3.1 Ongoing monitoring of business relationships
- Obligation excerpt linked — Section 4.3.1 → AML/CFT/CPF Policy & Procedures Manual
- Risk mapped — Section 7 (Sanctions) → Sanctions (L1)
- Control linked — CDD Exemptions & Simplified Measures Control → Section 4.5
- Approval completed — Section 2 (Corporate governance) obligations, 12 approved
- Note added — “Cross-check against the Handbook Q2 consultation paper”
- Section approved for use — Section 4 (Customer due diligence), 38 obligations
- Source status changed — Draft → Active
- Obligations imported — 12 sections, mapped to the risk taxonomy
- Source created — AML/CFT/CPF Handbook (JFSC)
What it does
Audit trail, in the function you actually run.
Every entry, edit and approval in Vantage Point is recorded against an identity and a time, and the trail is exportable. When a regulator asks how a decision was reached, the trail is in one place and reads end to end.
- ISO/IEC 27001 certified for information security; aligned to ISO 37301 (the methodology spine) and ISO 31000.
- Data resides in your own region (UK data in the UK, EU data in the EU, US data in the US) and stays there.
- Role-based, entity-scoped access, with SAML single sign-on.
- Every record change timestamped, attributed and exportable.
Also in Vantage Point
The rest of the system.
- Risks Inherent. Residual. Entity-scoped.
- Actions Corrective. Monitoring. Escalation. One workflow.
- CMP Doing it right.
- Controls Mapped to what they satisfy.
- Registers Pre-built registers. Configurable fields.
- Regulatory library Pre-built. Kept current.
- Reports Live data. Committee-ready.
- Entities One system. Yours and your clients'.
Questions
Questions about audit trail.
- What does the audit trail record?
- Every record change: what changed, who changed it and when, across obligations, risks, controls, tests, actions, registers and entities. It is part of the product's data model rather than a log bolted on afterwards.
- Is the audit trail exportable?
- Yes. The audit trail is one of the seven report types and exports to Excel, filtered by entity, module, user or date range.
- Where is customer data hosted?
- In your own region: UK data in the UK, EU data in the EU, US data in the US, and it does not leave that region. The infrastructure article on the security and privacy hub sets out the detail.
- What standards does Vantage Point hold?
- ISO/IEC 27001 certified for information security management, and aligned with ISO 37301 (compliance management systems) and ISO 31000 (risk management), whose structures shape how obligations, risks and controls connect in the product.
- How is access controlled?
- Role-based and entity-scoped, with SAML single sign-on on every plan. Access to production systems is limited to named engineers, reviewed and logged, and customer data is accessed only on the customer's explicit request or for incident response.
Related
Audit trail, further in.
Next step30 min · Tailored · No deck
See audit trail running on your firm's structure.
A 30-minute walkthrough using your entities, your licences and a real workflow you bring to the call. No slide deck.