Administration and compliance

# Security, audit trail and 21 CFR Part 11
How records are protected: the append-only, hash-chained audit trail and its integrity check, reasons for change, electronic signature controls, session limits, tenant segregation, the security event log and audit-trail review and export.
In the portal: [/app/security](https://qlogix.ai/app/security)

## Controls in force
Control How it works
Append-only audit trail Every create, change, decision, signature, export and AI draft is an entry; entries cannot be updated or deleted
Hash chain Each entry is chained with SHA-256 per organization; every record page shows the integrity check
Reasons for change Required to change any existing value, reopen, withdraw, return, reject or reassign
Electronic signatures Email and password re-entry, meaning recorded, content hash, lockout after 5 failures in 15 minutes
Sessions Signed out after 15 minutes idle; rate limits on requests and AI steps
Segregation Each organization's records are separate; the database refuses access across organizations
Attachment fingerprints SHA-256 checked every time a document is read

## Checking integrity
Every record page shows "Audit trail integrity verified (N entries in your organization)". If it ever shows integrity check FAILED at entry X, stop and contact support immediately. The [Security and audit](https://qlogix.ai/app/security) page shows the same check with counts of records, audit entries and signatures, and your access level.

## Reviewing and exporting audit trails
- 1Step 1 : Open [Audit trails](https://qlogix.ai/app/audit) (administrators).
- 2Step 2 : Filter by product, period, person and action family (review and approval, signatures, alerts, Q Agent and agents, attachments, training attestations, record created, reopened, exported), or search by reference, name, field, reason or value.
- 3Step 3 : Choose Export CSV for an inspector or periodic review (up to 50,000 entries). Each record's own audit trail is also in its PDF, Word and CSV exports.
Administrators see the last 200 security events on the Security page: wrong password at signing, signing locked, action refused (access level), rate limit reached, invalid session, integrity failure, attachment fingerprint mismatch, and access changes.

---
Source: https://qlogix.ai/docs/security-and-audit
QLogix · contact@qlogix.ai · +17146639012