Immutable audit trail.
Every sanctions screen and intelligence check is recorded automatically, signed with an integrity hash, and stored in an append-only log. Records cannot be deleted — only archived from your view. The full trail is always available for export.
What is recorded
Timestamp
Exact UTC date and time the screen was run.
Query
The name searched, plus any additional identifiers supplied (DOB, passport, country, IMO).
Source
Whether the search came from the Screen tool, the Supplier profile, or the API.
Result count
Number of matches returned above the configured confidence threshold.
Top match
Name, source registry, and confidence score of the highest-scoring result.
Integrity hash
SHA-256 of user ID + timestamp + query name + result count. Written at insert time and re-verifiable on export.
Regulatory context
CSDDD — EU Corporate Sustainability Due Diligence Directive
Article 8 of CSDDD requires companies to implement and maintain due diligence processes and to document them. The audit trail provides evidence that sanctions screening was performed at a specific point in time — a key input to your CSDDD compliance documentation. Exportable as CSV for inclusion in regulatory filings or external audits.
FATF Recommendation 10 — Customer Due Diligence
FATF R.10 requires financial institutions and designated non-financial businesses to maintain adequate records of CDD measures taken, including identity verification and sanctions screening results, for a minimum of five years. The append-only design means records accumulate without being overwritten — the history of every check is permanently preserved.
AML6D — EU 6th Anti-Money Laundering Directive
AML6D strengthens record-keeping requirements and introduces criminal liability for natural persons responsible for AML failures. The timestamped, integrity-verified audit trail demonstrates a documented compliance process, supporting a due-diligence defence in the event of an investigation.
Integrity verification
Each record is written with a SHA-256 hash computed from:
When you export the audit trail with Verify integrity enabled, each row's hash is recomputed on export and compared to the stored value. A true in the integrity_ok column confirms the record has not been altered since it was written.
Note: archiving an entry (hiding it from your view) does not affect its integrity hash. Archived entries remain in the full export with is_archived = 1.
Exporting your audit trail
Go to Account → Audit Trail.
Optionally enable "Verify integrity" to add an integrity_ok column to the export.
Click "↓ Export audit trail". The file downloads as a CSV named audit-trail-YYYY-MM-DD.csv.
The export covers all records for your account (and all team members, if on a Teams plan).
Archived entries are included in the export. Active-only entries appear in the account view.