Audit log and access reviews
What is logged, where to read it, and how to review who has access.
- Updated
- Updated
- Reading time
- 5 min read
- Tags
- auditcompliancehipaa
Every read and write to a chart is logged. The audit log is your single source of truth for HIPAA access reviews.
What is logged
Dr. Lin Yu · Provider
Opened chart · Patient · Maria Lopez
Today, 9:42am
73.21.4.118
Dr. Lin Yu · Provider
Signed and locked · Note · Visit 2026-04-21 · changed: Signed at, Status
Today, 9:51am
73.21.4.118
Sam Cole · Practice manager
Exported CSV for compliance review · Audit log · 1,247 rows
Today, 10:14am
108.4.99.12
Sam Cole · Practice manager
Granted manage_billing · User · Dana Park
Today, 10:18am
108.4.99.12
Sign-ins, chart opens, note edits, prescription sends, role changes, exports. Each entry has user, timestamp, IP, and the affected record — color-coded by category so the eye scans for the kind of event before reading the row.
Reviewing who has access
EnWella has no access-review screen and no sign-off step, so the review is done from two pages. Team lists every member with their roles and marks a deactivated member as inactive. In the Audit log, the Permissions filter shows every change to a member's access and Sign-ins shows who signed in and when; Export CSV saves the entries on screen for your compliance file. Recording that the review was done, and when, stays with you.
Was this article helpful?