# Audit Trail

Every movement, with its whole story — append-only, retained indefinitely.

When a reviewer asks who moved $2M on a Tuesday, screenshots and a group chat are not an answer.
Vaultody records each transaction request as it happens — its policy evaluation, who approved it,
when it broadcast, when it mined — and exports it in a form your auditors can read without you in
the room.

## Evidence, pre-assembled

- **Per-request, per-state** — every state transition is recorded with its timestamp, not
  summarised at the end: created, policy-evaluated, approved by whom, broadcast, mined.
- **Approvals attached to the movement** — the approval that authorised a transfer is part of that
  transfer's record, not a separate log to correlate.
- **Immutable by invariant** — no edits, no deletions. It is a platform property, not a feature
  toggle.
- **Exportable, not screenshot-able** — CSV export and API access for reconciliation and for your
  auditors' own tooling.

Fund and key actions land in the same append-only log, and operational logs — deliveries, logins,
events — are retained indefinitely with no scheduled purge.

## FAQ

**How long is history kept?**
Transaction and operational logs are retained indefinitely; there is no scheduled purge.

**Can we pull it into our own tooling?**
Yes — via the API and CSV export, per tenant.

## Related

- [Policy Engine](/features/policy-engine)
- [Roles & Permissions](/features/roles-and-permissions)
- [Dashboard + API](/features/dashboard-and-api)
- [Enterprise](/enterprise)