Immutable audit trail
across firm and engagement activity
Every major action in duely is added to an append-only audit record with the actor, timestamp, context and workflow history. When you need to review an engagement or explain what changed, the record is already there.
Audit trail
Illustrative
- Engagement opened Actor and time recorded Staff
- Identity verified Actor and time recorded Staff
- Risk rated Medium With the rationale Staff
- Engagement approved With the decision rationale Approver
- Evidence pack exported Version 1 AMLCO
Why this matters
Audits and reviews go badly when the chronology is missing. If the team cannot see who changed what, when, and in response to which trigger, the record quickly loses credibility.
duely builds audit history into the product. Engagement actions, approvals and status changes form a clear timeline, while sensitive suspicious matter activity stays out of shared views.
What's included
Append-only event history
Immutable log where entries can only be added, never modified or deleted.
Actor and timestamp tracking
Every entry identifies the user who performed the action and when it occurred.
Engagement and firm activity
Audit events cover engagement creation, verification, risk assessment, approvals, and exports.
Approval history
Record approver identity, timestamp, and decision rationale for every approval event.
Filtered visibility for sensitive SMR activity
Suspicious matter report (SMR) events are written to the same immutable log as every other compliance action. They are filtered out when anyone outside the AML/CTF compliance officer (AMLCO) role reads the log, and there is no separate log for anyone to find.
Support for evidence pack generation
Key audit events are excerpted into evidence packs automatically, so each pack shows the context behind its decisions.
Record-keeping under the AML/CTF Act
- Record-keeping: 7 years from relationship end or service provision
- Records must include: who, what, when for every compliance action
- Audit trail must be tamper-evident and complete
- Retention anchor: a date and documented reason for each engagement
Related features
Other parts of the compliance workflow this connects to.
Evidence Packs
Audit trail excerpts are included in evidence pack snapshots.
See details →Customer and Engagement Workflow
Every engagement lifecycle event is written to the audit trail.
See details →SMR Firewall
SMR events sit in the same immutable log but are filtered out of non-AMLCO reads. This is one of the layered controls that prevent tipping off.
See details →Give your team a clearer chronology of compliance work
Append-only audit history with actor tracking, timestamps, and evidence pack support.