Auditing, Compliance, and Reporting Overview

Track and report on access requests, administrative changes, and user sessions to support compliance and investigations

Apono is a SOC 2 type II certified vendor. Its centralized audit records and reporting capabilities provide visibility into access requests, administrative changes, and user sessions.

These records and reports help security, compliance, and operations teams investigate activity, troubleshoot access issues, and collect evidence for internal reviews and external audits.

Apono’s auditing and reporting capabilities can provide evidence for compliance processes associated with frameworks and regulations such as SOC 2, SOX, HIPAA, GDPR, and PCI DSS. These capabilities help your organization address audit requirements while maintaining security and operational efficiency.

---

Choose the right audit source

Use the following table to identify the audit information you need and where to find it.

Item to audit	Apono feature	Information available
Access requests and granted access	Activity Create Reports Manage Reports	Request details, requesters and grantees Requested resources and permissions Request timeline Approval decisions Access status Revocations
Administrative and configuration changes	Admin Audit Log (Syslog)	Administrative actions, such as managing users and service account tokens Configuration changes, including who performed an action, what changed, and the affected object
User sessions	Session Audit Session History	Session Audit: Supported protocol-specific activity captured during privileged sessions Session History: Session metadata and report downloads