Every governed action on a clinical record writes an audit row naming the organization, the user and their role, the action, the record it touched, the previous and the new value, the time, the source address and session, and the outcome. Every access to patient data is recorded. Signed grades add the signature itself: who signed, when, the meaning of the signature and a SHA-256 hash of the signed content, together with what the clinician accepted, what they overrode and the citations as signed. Changes to AI preferences are recorded too. The audit log is retained when a patient's data is erased, holding identifiers and counts only, as the proof the erasure happened. Organization admins review it in the platform's audit log.
Interactive demo
Try Burna right now, no sign up required.