01
Higher-risk actions such as sensitive admin updates, billing changes, privacy handling, and partner-access changes are captured for traceability.
Public summary
Audit logging summary
Sensitive admin and billing actions are logged for review and traceability.
- Updated
- August 30, 2026
- Scope
- Public summary
- Escalation
- Formal follow-up available
Current control position
Sensitive administrative, partner-access, billing, privacy, and lifecycle actions leave reviewable records. Historical Terms acceptance, authorizations, invoices, and prior decisions are preserved as point-in-time evidence rather than rewritten to match later account state.
Audit logging summary · Current public evidence boundary
Current safeguards
What Blacklight currently does
These statements describe implemented controls and their limits in plain language. They are not a certification, legal opinion, or substitute for an institution-specific contract requirement.
02
Partner portal terms acceptance, event quote acceptance evidence, reconciliation-draft creation, and authorized Blacklight invoice approval are recorded as separate reviewable steps.
03
The goal is not surveillance of ordinary use. It is accountability around the kinds of actions that matter in support, privacy, and partner operations.
04
This gives reviewers a first-pass answer to “how would you know who changed something important?” without opening internal dashboards during procurement.
Next review path
Open the next document only if the review actually needs more
Start with this summary. Then move into the packet, appendix, or formal follow-up only when the reviewer needs a broader or more formal response. Move into partner review when the next useful step is rollout fit, launch scope, and trust review together.
Use the packet when the team needs one concise review document.
Best for a first review share before deeper follow-up starts.
Open trust packetUse the appendix when the reviewer needs deeper technical detail.
Best for retention periods, provider handling, protected tokens, and detailed access controls.
Open technical appendixStart the partner request when trust diligence has become a real rollout decision.
Best when the review now needs program fit, launch plans, and trust questions considered together.
Start partner reviewRequest formal trust follow-up when the public materials are no longer enough.
Best for questionnaire packets, procurement follow-up, or trust-specific requests that need a formal response.
Request audit-review follow-up