# Every change, who made it, and when.

> The audit trail logs changes to each incident: who changed what, when, and from which value to which. Approvals, AI-drafted fields and sign-offs are in the history, so a surveyor, auditor or attorney can follow the record from first report to closure.

Source: https://incidentkit.ai/product/audit-trail · Updated Oct 5, 2026

**Audit trail** (prove): Every edit is logged, so you can show who changed what, and when.

## What it does

- **Change history** Field-level changes with the person, the time, and the before and after.
- **Approvals and signatures** Who attested, who approved and who closed it, with timestamps.
- **AI use is visible** See which fields Lauren drafted and who approved them.
- **Role-based access** Role and facility decide who can view or edit a record.
- **Stronger record locks** (rolling out) Append-only protections (entries can be added, never changed) and closed-record locks are being strengthened on a published roadmap.

## How it works

1. **Work the record** Every edit is logged as it happens.
2. **Review the history** Filter by person, date or field.
3. **Export with the packet** The trail travels with the incident.

## Frequently asked questions

### Can records be edited after closure?

An authorized role can reopen a closed record. The reopen and every later edit show in the history. Stronger closed-record locks are rolling out.

### Is the audit trail enough for HIPAA?

No. An audit trail is one of several safeguards HIPAA expects. See the [HIPAA page](https://incidentkit.ai/hipaa) for how IncidentKit approaches the Security Rule.

## Related

- [QAPI, survey and OSHA compliance packets](https://incidentkit.ai/product/compliance-packets)
- [IncidentKit security overview](https://incidentkit.ai/security)
- [HIPAA and BAA for incident reporting](https://incidentkit.ai/hipaa)
- [Multi-site incident management with roles and SSO](https://incidentkit.ai/product/multi-site-and-roles)
- [Survey and accreditation readiness: a continuous approach](https://incidentkit.ai/guides/survey-and-accreditation-readiness)
- [ASC survey readiness: what surveyors ask for and check](https://incidentkit.ai/compliance/survey-readiness/asc-survey-readiness)