# Audit Logging

**Project:** General | **Votes:** 2
**URL:** https://roadmap.ploi.cloud/projects/1-general/items/191-audit-logging

---

Currently, Ploi Cloud does not provide a way to see:

* When a change was made, and by whom.
* When someone enabled "debug access" on a database, thereby gaining access to that database.

This makes it difficult to trace who performed which action, which poses a risk to traceability and security (e.g. in the event of an incident or unauthorized access).

**Requested Solution**

An audit logging feature that tracks, at minimum:

* Who made a change (user/account)
* When the change was made (timestamp)
* What was changed (action type / description)
* When database debug access was enabled/disabled, by whom, and for how long it was active

**Why This Matters**

Without this logging, there is no visibility into who has had access to sensitive data (such as databases), making it difficult to demonstrate accountability or trace misuse/unintended access.

**Compliance Relevance**

This functionality would help us support compliance with information security standards such as ISO 27001 (control A.8.15 – Logging), which requires event logs covering user activities, exceptions, faults, and information security events to be produced, retained, and reviewed.