Handbook / Security and data protection
Log
Universe Memory records every significant action with person, action, object and time in the organization's log.
Purpose
Who approved what, and when? The log answers this question for every organization. It creates traceability for audits, data protection and internal auditing.
How it works
- A member performs an action, for example “Approve” on a knowledge entry.
- Universe Memory writes a log entry: who, which action, which object, which ID, when.
- The owner and administration can read the log of their organization; nobody else can.
- Microphone only after your click
- Four-eyes principle
- Data in Frankfurt am Main
- Every approval in the log
Fig. 1 The three visibility scopes: the database does not deliver a restricted entry of another department; a department entry is seen by the department's members.
What is logged
- Organization: created, joined.
- Knowledge: captured, submitted for review, approved, returned, archived.
- Knowledge questions: asked, answered, postponed.
- Team: department created, person assigned, role changed, invited.
- Processes: created, approved.
- Situation reports: created, approved.
- Drafts: created, approved, discarded.
What is not in the log
The log records that something happened, not the content. Texts of knowledge entries, answers or drafts are not in it. A member can only write entries with themselves as the acting person.
Tips
Assign the role “Administration” to the person who needs to see the log for auditing or data protection; other roles do not read it.
Frequently asked questions
Who may read the log?
The owner and administration of the respective organization.
Does the log contain the texts?
No. It contains person, action, object, ID and time, not the content.
Related features
As of: · Concept & lead: Alexander Holtermann