Yes. Every significant action taken on a Data Principal Request is recorded, creating a complete, traceable history from submission to closure. This includes request receipt, routing, approvals, denials, escalations, links to grievances, SLA warnings, and missed deadlines, along with details of who performed the action and their IP address.
To protect sensitive information, credentials and secrets are automatically redacted before audit data is stored. Every audit entry is also reflected to immudb, an immutable ledger database designed to make unauthorized modifications detectable.
This gives organizations a tamper-evident audit trail that can support internal reviews, regulatory inquiries, and compliance audits.
Explore miniOrange with audit-ready privacy workflows.
