Audit log and access reviews
What is logged, where to read it, and how to run a quarterly access review.
- Updated
- Updated
- Reading time
- 5 min read
- Tags
- auditcompliancehipaa
Every read and write to a chart is logged. The audit log is your single source of truth for HIPAA access reviews.
What is logged
Dr. Lin Yu · Provider
Opened chart · Patient · Maria Lopez
Today, 9:42am
73.21.4.118
Dr. Lin Yu · Provider
Signed and locked · Note · Visit 2026-04-21 · changed: Signed at, Status
Today, 9:51am
73.21.4.118
Sam Cole · Practice manager
Exported CSV for compliance review · Audit log · 1,247 rows
Today, 10:14am
108.4.99.12
Sam Cole · Practice manager
Granted manage_billing · User · Dana Park
Today, 10:18am
108.4.99.12
Sign-ins, chart opens, note edits, prescription sends, role changes, exports. Each entry has user, timestamp, IP, and the affected record — color-coded by category so the eye scans for the kind of event before reading the row.
Quarterly access reviews
Establishment → Audit → Access reviews. Generate a report listing every active user, their roles, and last login. Mark each as reviewed; the report is timestamped and archived for your compliance file.