A record that proves itself.
Act
Someone or something acts: a person, a key, an agent, a sync.
Record
The entry names who acted, what it was about and where from.
Chain
It carries the SHA-256 hash of the entry before it.
Stream
It goes on to your SIEM, in batches, backing off when needed.
Verify
/verify walks the chain end to end; the last check stays on record.
01The log
One log. Everything it can tell you.
Change one entry and the chain breaks.
Every entry carries the SHA-256 hash of the one before it, so no entry can be altered or removed without breaking the chain. /verify walks it end to end, and says why when it fails.
- Append-only, SHA-256 hash-chained
- Stays whole across server instances
- An organisation can read its last verification
- Every check carries a reason code
PlansOn every plan
Find the one event that matters.
Free-text search finds the words of actions, agents, addresses and people. The activity summary totals any filter, counts every kind of actor and spans a year.
- Each entry says the device and where the request came from
- A live activity stream carries the audit records themselves
- Filtered in the query, with how many match
PlansOn every plan
Your security team's tools, fed directly.
Log sinks stream the audit trail on to your SIEM, in batches, backing off when a destination is slow.
- A destination can be sent a test event
- Batched, with back-off
PlansFrom Enterprise
The unusual, flagged.
Behavioural baselines flag activity that does not fit, and bot detection catches automated sign-ins — each listed with totals, who it was and which account.
- Behavioural-baseline anomaly detection
- Bot detections, with who and which account
PlansFrom Starter
Evidence your auditors can read.
Live control-state evidence for SOC 2 and ISO 27001: each control says when it started failing, who owns it and what to do. Evidence is not certification.
- Each failing control says since when, its owner and the fix
- External audits recorded alongside
PlansFrom Pro
Erasure that keeps the record honest.
Right-to-erasure with a grace period before the purge, data export, and retention that purges what it should — while the audit trail stays intact.
- An erasure request names its person until erased
- Retention says who changed it
- A deleted organisation's data is purged after its restore window
PlansOn every plan
02Each entry
Every entry says who, what, where and why.
Who
A person, an API key, an AI agent, SCIM, the admin portal, a linked phone or the system.
What
The action and what it was about — even a relationship that was removed.
Where
The address, and the device's operating system and type.
Why
A reason code on every verification, address check and authorization result.
03On each plan
An audit log on every plan. SIEM streaming on Enterprise.
Free
₹0/month
10,000 users
Starter
₹2,400/month
25,000 users
Pro
₹8,000/month
100,000 users
Enterprise
Custom
Custom scale
Erasure and export: Free: included; Starter: included; Pro: included; Enterprise: included
Audit log: Free: 7-day; Starter: 30-day; Pro: 90-day + export; Enterprise: Custom + SIEM
Anomaly and bot detection: not on Free; Starter: limited; Pro: included; Enterprise: included
Compliance evidence: not on Free; not on Starter; Pro: limited; Enterprise: custom
SIEM streaming: not on Free; not on Starter; not on Pro; Enterprise: included