Audit and export

The audit trail is NuBench's system of record: every prompt, response, policy decision, and administrative action, written as structured events your compliance team and your regulator can actually read.

What is recorded

• Conversation events — prompts and responses with their classification tiers, the model used, and token counts.
• Policy decisions — every budget evaluation, DLP match and action, and routing decision, with the rule that fired.
• Administrative actions — user changes, role changes, budget and policy edits, provider configuration changes.
• Authentication events — sign-ins, session issuance, and role-gate refusals.

Integrity

Audit records are designed to be immutable:

• Records are hash-chained — each record's hash covers its content plus the previous record's hash, so removal or alteration anywhere in the chain is detectable.
• The audit store is encrypted with its own dedicated customer-managed KMS key, separate from application data.
• Access to decrypt audit data is itself logged (AWS CloudTrail records every KMS decrypt call).

Service status: audit events are captured by the governance pipeline today. The dedicated archive service that manages long-term retention tiers is in development.

Export

Auditors and org admins can export audit data for evidence requests, investigations, or regulator delivery. Exports preserve the structured event format, so they can be loaded into your existing SIEM or GRC tooling.

Retention

Retention for conversation logs is configurable per organisation to match your records policy. Audit events follow your configured retention with the integrity chain preserved across the retained window.