Skip to content

Commit 79c93af

Browse files
reword: session recording audit overview (#2223)
reword: overview
1 parent 7eaee10 commit 79c93af

1 file changed

Lines changed: 7 additions & 5 deletions

File tree

content/docs/capabilities/session-recording.mdx

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -679,13 +679,15 @@ For end-users looking for detailed analytical querying it is recommended to inge
679679

680680
## Auditing
681681

682-
The integrity & auditing section describes the "chain of custody" of session recording data, covering the methods Pomerium provides to maintain a verifiable, tamper-evident record of how session recording data was collected, stored, and accessed.
682+
The Integrity & Auditing section describes the "chain of custody" for session recording data, enabling end-users to meet strict compliance requirements for the handling and auditing of privileged information.
683683

684-
Pomerium combines three complementary mechanisms to produce a tamper-evident record of session recordings:
684+
The "chain of custody" model Pomerium provides relies on:
685685

686-
- **Storage access patterns** — write-once semantics that preserve the integrity of recording objects in the blob store
687-
- **Pomerium audit logs** — record every access of a recording made through Pomerium Enterprise.
688-
- **Cloud provider audit logs** — record every access of a recording at the storage layer. Requests originating from Pomerium are annotated with cryptographically verifiable metadata that ties them back to a Pomerium audit log entry.
686+
- **Storage access patterns** : guarantees about how the recordings are uploaded and accessed
687+
- **Enterprise audit logs** : records every access by end-users through Pomerium Enterprise
688+
- **Cloud provider audit logs** : Audit logs at the storage layer include metadata that can be correlated with Pomerium Enterprise, enabling verification when data was accessed through Pomerium Enterprise.
689+
690+
This model provides a tamper-evident audit trail for the handling and access of session recording data.
689691

690692
### Storage access patterns
691693

0 commit comments

Comments
 (0)