# An audit trail nobody can alter

> Substrait records every access and action in an audit trail that nobody, a platform admin included, can change after the fact. It is queryable, exportable to your security monitoring, and kept in storage you control.

URL: https://substrait.build/capabilities/audit-trail/  
Last updated: 2026-11-06

Substrait records every access and every action in an audit trail that nobody can change after the fact, a platform admin included. An audit log an admin can edit is not an audit log.

## What Substrait records

- Every governed read of company data: which tool read what, and the person behind it
- Every deploy, promotion, approval and rollback
- Every grant, its approver and its expiry
- Every action an agent takes, as "this agent, acting for this person"
- Every change to people, groups and roles

## Where the trail lives

The trail and the reports Substrait produces are written to storage your organisation controls.
Substrait's control plane keeps references and fingerprints, not the contents, so it can prove what existed and that nothing changed.

## What you can do with it

Query it in the console.
Export it to your security monitoring system.
Hand it to an auditor, with a software bill of materials and licence scan for each release.

## Related

- [Company data, granted by its owner](https://substrait.build/capabilities/governed-data-access/): A tool on Substrait reads company data only after the data owner approves it, for a set time, through one gateway that holds the credential, checks every call and records every read.
- [A security command centre, built in](https://substrait.build/capabilities/security-command-centre/): Substrait gives the security team one console for every finding across every tool, opening on one page that answers how exposed the company is right now, in the organisation's own severity names.
- [Security, configured exactly for your organisation](https://substrait.build/security/): Security, Substrait's third pillar. Every release is checked before production, and each organisation sets how strict that check is: its own risk tiers, blocking rules, severity names, approvers and deadlines, with a full audit trail nobody can alter.
- [Agents with their own identity and their own limits](https://substrait.build/capabilities/governed-agents/): On Substrait an agent is a tool its builder owns. Each agent has its own scoped identity, authority never wider than its owner's, a check on every action, a record of whom it acted for, and a switch on its identity.