Audit Trail

Immutable audit logging for every memory operation.

Audit Trail

Every access to incident memory is logged. View with get_audit_log.

Example

// MCP tool call
{
  "tool": "get_audit_log",
  "arguments": {
    "tenant_id": "acme-bank-prod",
    "action": "delete",
    "from": "2026-01-01T00:00:00Z",
    "to": "2026-03-21T23:59:59Z",
    "limit": 100
  }
}

Configuration

# Audit trail is enabled by default
VALQORE_MEMORY_AUDIT=true
 
# Optional: send audit events to external SIEM
VALQORE_MEMORY_AUDIT_SINK=syslog://siem.internal:514

Was this helpful?

Encryption at Rest

Data Retention & GDPR