Skip to main content
Plans: Every plan, and Free. Who: every member views and exports it. Nobody can change or delete an entry.
Pharus writes an audit entry for every action that matters to a reporting decision: matches, incidents, determinations, approvals, filings, pages, settings and more. Each entry records what happened, who or what did it, and when. The trail is append-only: “Entries can’t be changed or deleted.” It is the record you show when someone asks how a decision was made.

​
What is logged

Entries are written in the same step as the change itself, so a change and its entry can’t come apart. Each one names its actor: a member by name, Pharus for automatic events, an API token for SBOM uploads, or the partner on a review link. All events also shows the entries outside these five types: disclosure reports and replies, advisories, the weekly exposure digest and the technical documentation.
Some actions remove data but leave their entry. Removing a reporter’s personal data from a disclosure report, or deleting a technical documentation attachment for good, is logged like any other action; the entry stays.

​
The Audit trail page

Select Audit trail in the sidebar. The page shows “Every event, in the order it happened”, newest first and grouped by day (“Today”, “Yesterday”, then the date). Times are Oslo time. An entry that belongs to an incident links to it. The page shows 100 entries at a time. Show older goes further back, and Back to newest returns to the top.

​
Filter the trail

Three filters sit above the list. They combine, and Clear filters resets them.

​
An incident’s Audit tab

Every incident has an Audit tab: “Every action on this incident, oldest first. Times in Oslo time.” It shows the number of entries and has a Print button, so you can hand over one incident’s full history. To filter or export one incident, use the Incident filter on the Audit trail page.

​
Export the trail

Select Export CSV on the Audit trail page. The file holds the entries that match your current filters, oldest first (the order a reviewer reads them), up to 50 000 entries per file. Every member can export, also while the workspace is read-only.
  • The file is UTF-8 with a byte-order mark, so spreadsheet programs read æ, ø and å correctly.
  • title and detail are in the language you use the app in.
  • A cell that starts with =, +, - or @ gets a leading apostrophe, so opening the file in a spreadsheet can’t run it as a formula.
  • The file is named after your workspace and the date, and after the incident when you filtered by one, for example pharus-audit-nordlys-INC-0042-2026-10-14.csv.
Owners and admins can also download everything the workspace holds, the audit trail included, as one file under Settings → Company. See Data and deletion.

​
Entries can’t be edited or deleted

Nobody in the workspace can change or remove an entry, whatever their role. A correction is a new entry, such as a corrected awareness time or a voided filing, and the original stays. If a member leaves or deletes their account, the entries they made keep their name. The trail is deleted only together with the whole workspace. See Data and deletion.

Decision record

The determinations and approvals the trail records.

SRP paste pack

The filings, receipts and voids the trail records.

Board report

The quarterly summary for your board.

Data and deletion

How long the workspace’s data is kept, and how to export it.