Audit Log & Security
Audit Log (/activity-log)​
File: admin/ActivityLogPage.tsx
The Audit Log shows a complete record of all security-relevant events in the system. Every login, resource access, data modification, and API call generates an AuditEvent FHIR resource that appears here.
What is logged​
| Event type | Examples |
|---|---|
| Authentication | Sign in, sign out, failed login attempts, MFA events |
| Resource access | Patient record viewed, lab result accessed |
| Resource changes | Record created, updated, or deleted |
| EHR sync events | EHR data import started, completed, or failed |
| AI chat events | Chat session started, safety refusal triggered |
| Admin actions | User invited, bot deployed, secret updated |
Filtering and search​
Admins can filter audit events by:
- Date range
- Event type / action
- User / patient
- Resource type
Compliance use​
The audit log is a key compliance tool for HIPAA requirements. It provides a full trail of who accessed what data and when.
Security (/security)​
File: SecurityPage.tsx
The Security page manages account-level security settings for the logged-in admin user:
- Change password — update the current account password
- Two-Factor Authentication (2FA) — enable or disable TOTP-based MFA for the admin account
- Active sessions — view and revoke active login sessions
note
This page manages the admin user's own security settings. Patient security settings are managed from the Member Portal's Settings page.