Quickstart
Log your first audit event in under 2 minutes across any of 5 supported languages.
Core Concepts
Learn about hash chains, WORM storage, projects, and how AuditRails keeps logs tamper-proof.
Authentication
Create an API key and start making authenticated requests to the AuditRails API.
How It Works
AuditRails sits between your application and your compliance auditors. You send events through the SDK or REST API; AuditRails hash-chains them, writes them to immutable storage, and makes them searchable — so you always have an unimpeachable record of what happened.1
Create an account
Sign up at app.auditrails.io/register. Every plan starts with a 60-day free trial — no credit card required.
2
Get your API key
In the dashboard, go to API Keys → Create API Key. Copy the key — it begins with
at_live_ and is shown only once.3
Install an SDK
Install the SDK for your language:
npm install @auditrails/node, pip install auditrails, go get github.com/auditrails/auditrails-go, or use the Maven/Composer packages.4
Log your first event
Call
audit.log({ action: 'user.login', actorId: 'user_123' }). The event is hash-chained and stored in WORM storage within seconds.Key Features
Immutable Hash Chains
Every event is SHA-256 linked to the previous one. Any modification or deletion instantly breaks the chain and is detectable.
WORM Storage
Logs are written to S3 Object Lock in COMPLIANCE mode — immutable even against AWS root. Required for SOC 2, HIPAA, and SEC 17a-4.
18 Compliance Frameworks
Built-in support for SOC 2, HIPAA, ISO 27001, GDPR, PCI DSS, NIS2, DORA, SOX, FedRAMP, EU AI Act, and more. Auto-verification included.
Drop-In SDKs
Official SDKs for Node.js, Python, Go, Java, and PHP. Fire-and-forget
log() never blocks your application.Real-Time Search
ClickHouse-powered search and filtering across billions of events. Exportable as CSV for external audit review.
GDPR & DSAR Tools
Built-in data subject access request (DSAR) export and deletion workflows to satisfy GDPR Articles 15 and 17.
Explore the Docs
Compliance Mapping
See exactly how AuditRails maps to SOC 2, HIPAA, ISO 27001, GDPR, PCI DSS, and 13 more frameworks.
API Reference
Full REST API docs with request/response examples for ingestion, querying, and chain verification.
SDK Overview
Compare all five official SDKs and pick the right one for your stack.
Hash Chain Verification
Understand how cryptographic hash chaining works and how to verify log integrity.