Audit logs

Lightning AI's SOC2 certification includes specific requirements around audit logging.

Read the in-depth guide to SOC2

Logs collection and management

Lightning AI systematically collects and manages logs from all relevant systems, applications, and infrastructure components. These logs include user activities, system changes, network activity, and any security events

Incident detection

Logs are configured to record any events that could indicate a security incident, such as multiple failed login attempts (which might suggest a brute force attack) or unexpected changes in user permission levels. Additionally, automated and periodic manual safeguards are in place to identify and promptly remove bad actors and attempted abuse of the platform to ensure reliability and security.

Data integrity and change management

Lightning AI is built with enterprise data governance standards in mind. Modifications to Lightning's data and system configurations are logged to track who made a change, what change was made, when it was made, and why. This ensures that all alterations can be audited and, if necessary, rolled back.

Log integrity and protection

Audit logs themselves are protected from unauthorized access, tampering, and accidental loss using TLS encryption.

Review and monitoring

Audit logs are continuously reviewed and monitored to identify and respond to potential security issues.