Audit Logging & Immutability Policy

Flask Track maintains immutable audit logs for security, integrity, and traceability.

Logged events include:

• Entity creation and modification
• Workflow execution steps
• Compliance checklist actions
• File uploads and deletions
• User access and role changes
• API-based actions

Audit records:

• Cannot be edited or deleted
• Include before/after state where applicable
• Are retained according to the record retention policy