Skip to content
Last updated: 2026-04-06
Guide

Audit Logging

Dxtra maintains audit trails for privacy compliance activities through data processing activity logs and registered DIDs.

Overview

Audit logging in Dxtra captures:

  • Data processing activity logs (DPAL records)
  • Data subject activity history
  • Rights request processing records
  • Consent changes
  • Registered DIDs for audit trails

Data Processing Activity Logs

Activities are logged automatically when:

  1. Data subjects are created or updated
  2. Consent is granted, modified, or withdrawn
  3. Rights requests are submitted or processed
  4. Data is accessed through integrations

Viewing Activity Logs

Navigate to Data Processing Activity Logs in the dashboard to view logged activities. You can filter by:

Dxtra generates decentralized identifiers (DIDs) deterministically from PostgreSQL UUIDs for:

  • Data controllers (did:dep:controller:...)
  • Data subjects (did:dep:subject:...)
  • Data processing activities

Dxtra generates Decentralized Identifiers (DIDs) for data controllers and data subjects. DIDs are deterministically generated from record UUIDs and provide:

  • Consistent identifiers across the platform
  • Verifiable history for each identifier
  • Cross-platform tracking across integrations

Rights Request Audit Trail

All rights requests maintain a complete audit history including:

  • Submission timestamp
  • Identity verification status
  • Processing status changes
  • Completion timestamp

Consent records include complete change history:

  • Initial consent grant
  • Consent modification
  • Consent withdrawal
  • Purpose changes affecting consent

Compliance Reporting

Article 30 Records

Dxtra automatically maintains Records of Processing Activities based on your configured processing purposes, legal bases, retention periods, and data processor associations.

Audit Export

Export audit data for regulatory review:

  1. Navigate to the relevant section in the dashboard
  2. Use the export function to download records
  3. Available formats include PDF and Excel

Access Control

Audit log access is restricted by role:

Role Access Level
Owner Full audit access
Admin Full audit access
DPO Full audit access
Auditor Read-only audit access
Data Controller Organization audit access
Developer Limited API audit access

Data Retention

Audit log retention follows configured policies:

  • Processing activity logs: Based on your retention policy
  • Rights request records: 6 years (GDPR requirement)
  • Consent records: Duration of relationship + 3 years

For Auditors

If you are conducting a compliance audit, the audit logging system provides complete evidence trails. Auditors have read-only access to all compliance records.

Key audit evidence: