Skip to content

M3-11 Audit Reporting — Activity Logs

Milestone: M3 — Issuing Functionality SOW Reference: FR8 Requirement Clarity: ✅ Clear Dev Status: 🟡 Partially prototyped — on-demand export exists; scheduled reports do not

Overview

Give Staffing Company/Platform Admins the ability to generate compliance and audit reports (user activity, data changes, consent logs) both on-demand and on a schedule.

Backend Tasks

  • Confirm AuditLogController/AuditLogService (app/backend/src/shared/controllers/audit-log.controller.ts) covers on-demand export — already prototyped
  • Wire up the currently-unused ComplianceJob entity (shared/entities/compliance-job.entity.ts — has scheduleCron/s3ReportKey columns but zero code references it) to actually run scheduled report generation

Frontend Tasks

  • Add a "schedule this report" option to the audit/compliance reporting UI

Dependencies

Acceptance Criteria

  • Audit reports generated
  • Compliance reports generated
  • Scheduled reports generated (per SOW Appendix 3, FR8 acceptance criteria)

Existing Reference Material

  • docs/requirements/tasks/POC/24-logging-tracking-reconciliation.md (kept in place — reconciles what's actually logged today vs. user-story expectations; also referenced from M9)

Blockers & Risks

  • Risk: the ComplianceJob entity being schema-only-with-zero-usage suggests this was planned but deprioritised — confirm it's genuinely needed for M3 acceptance or can move to M9 hardening instead.