Audit Logs and Compliance Support
A time-stamped record of significant actions and changes in the system, with the user behind each one, ready for security reviews and regulators.
Audit logs store each significant action and change with a detailed timestamp, the user ID, and the action performed. Teams use that data for internal reports on troubleshooting and security monitoring, and it is ready to hand to regulators when they ask.
The platform supports compliance with local regulations and major standards, including GDPR, PCI DSS, ISO 27001, HIPAA, and SOC 2. Data protection measures, privacy controls, and consent management are in place to safeguard customers and your business.
Who Signed In, When, From Where, and on Whose Behalf
The sign-in log answers those four questions. It keeps a durable record of every successful and failed sign-in attempt, including sessions started through Login on Behalf.
- A full record on every row: Each record carries the date, the user name exactly as it was typed, the outcome, the failure reason where there is one, the sign-in type, the operator on login-on-behalf rows, IP address, host, user agent, store, and member.
- Summaries that open the detail: The summary widgets are clickable and open the detailed log.
- User names recorded as entered: A security team can spot credential-stuffing patterns against accounts that do not exist.
- The operator on assisted sessions: Capturing who started a Login on Behalf session makes “who actually did this?” answerable after the fact.
The sign-in log works alongside secure user authentication.
What Audit Logs and Compliance Support Deliver for Your Business
-
Security and protection of customers: Proper data handling and storage keep customers protected against data leaks or loss.
-
Reduced business risks: Staying compliant with regulations and standards and maintaining logs in the correct format minimizes the risk of fines by regulatory bodies.
-
Access control: Role-based permissions and secure APIs ensure that only authorized users have access to sensitive data, audit logs, and reports.
-
Boosted loyalty: Businesses that operate in accordance with local laws and regulations earn greater trust from customers and partners.
To find out more about Virto Commerce’s capabilities, please visit our user guide.
Your Questions, Answered
An audit log is a time-stamped record of who did what in a system. In Virto Commerce it covers significant actions and changes, with the user ID and the action performed. A dedicated sign-in log adds every successful and failed sign-in attempt.
Every successful and failed sign-in attempt, including sessions started through Login on Behalf. Each record carries the date, the user name as typed, the outcome, the failure reason where there is one, the sign-in type, IP address, host, user agent, store, and member. Login-on-behalf rows also name the operator.
Yes. A session started through Login on Behalf is logged with the operator named, and orders and actions in that session are recorded with the operator as the creator. When someone asks who did this, the record answers it.
The log records the user name exactly as it was typed, including names that match no account. Repeated failed attempts against such names stand out in the records, which is the pattern credential stuffing leaves behind.
Virto Commerce supports compliance with GDPR, PCI DSS, ISO 27001, HIPAA, and SOC 2, as well as local regulations. Audit data on actions, timestamps, and user IDs feeds internal reports for troubleshooting and security monitoring, and can be handed to regulators.
