Overview

Audit log service collects (audit) events from the services used across the SaFi Bank system. It records the occurrence of an event, the time at which it occurred, the responsible customer or agent, the impacted entity etc.

The purpose of the audit log is to

Have a log of business-relevant activities in the system for reporting/auditing/investigation purposes
- In future releases, the activity log may be presented to back-office agents/admins as well
Have a log of entity changes (e.g. changes in customer profile) to be presented to back-office agents
Have a log of inbound/outbound customer communication to be presented to back-office agents

Events

The audit log wil use dedicated audit events sent to a audit kafka topic in order to control what data is logged (https://safibank.atlassian.net/wiki/spaces/ITArch/pages/25362436/Kafka+message+types#Events)

The event should contain enough dta to be able to construct a human-readable description of it. (E.g. if a ID card scan was verified, the type of ID should be logged, not just internal docuemnt ID)

Communication events

All communication services/providers are expected to log the communication to audit log. However, the actual communication content (email body, call transcript/recording (if stored in the future) etc.) would not be part of the log to avoid storing possibly large data in the log.

SaFi Bank Space : Audit log & Communication history

Overview

Events

Communication events

Attachments: