| ID | product.governance.audit_service |
|---|---|
| Description | Append-only audit log for every data access. |
| Key | audit_service |
| Type | microservice:service |
| Team | Governance & Audit |
| Owner | governance@healthcare.example |
| Status | active |
| Technologies | Go, PostgreSQL, OpenSearch |
| Attributes | retention: 7y, semantics: WORM |
| Tags |
The Audit Service is the append-only audit trail for PHI access, consent changes, research queries and merge operations.
WORM semantics
Audit records are never updated or deleted — only appended and queried.
Could not build diagram for model "example-healthcare".
The Audit Event Collector accepts events from all services.
Audit Storage writes immutable, encrypted partitions.
The Query API serves compliance officers.
Search and export endpoints for audit investigation are on the Overview tab.
Contract
Querying audit logs is itself audited — officers cannot browse without a trail.
4 workflows
| Workflow | Model | Participant id | Participant label |
|---|---|---|---|
| Consent update governance.consent-update | example-healthcare | product.governance.audit_service | Audit service |
| HL7 admission ingestion clinical-flows.admission | example-healthcare | product.governance.audit_service | Audit service |
| Lab result delivery clinical-flows.lab-result | example-healthcare | product.governance.audit_service | Audit service |
| Researcher query governance.researcher-query | example-healthcare | product.governance.audit_service | Audit service |