herbe ID · module
Audit & security
A log that only grows, a second check before anything dangerous, and a sign-out that reaches every app.
Security you can check
How it works
What gets recorded, and who sees it
Rows hold ids, never addresses. Secrets, addresses and redirect addresses are never recorded.
- A passkey answers a confirm prompt for five minutes; an authenticator code answers one action
- A recovery code, an emailed link, a Microsoft sign-in or an eParaksts sign-in never confirms a dangerous action
- The check runs on the server before the change, so a screen cannot skip it
- When an assistant uses a tool, herbe staff can see which tool and the outcome, never what was asked or answered
- Filter it
By organisation, person, action and date.
- Admins see admins
An organisation admin sees what admins did in their organisations: invitations, memberships, app access, the AI switch, apps and ended connections.
- Verify the chain
Herbe staff can recompute every row's hash. The answer is that the chain holds, or the entry where it breaks.
How to start
Set up a second step
Admins add an authenticator app or a passkey before they need to confirm something.
Invite and give access
Every invitation, role change and access change lands in the log.
Read the log
Filter by organisation, person, action and date.
Questions about audit and security
Can anyone edit the audit log?
No. It is append-only, and no screen edits or deletes a row.
How do we know it has not been altered?
Each row's hash is computed from the one before it. Herbe staff can verify the chain: it answers that the chain holds, or names the entry where it breaks. A break means a row was changed, inserted or removed after the fact.
Which actions ask me to confirm it is you?
The ones that hand over or end power: inviting or changing an organisation admin, disabling or removing a membership, removing someone's app access, switching AI off, and trusting or removing a Microsoft tenant. Inviting a plain member and giving access to one app do not.
What if I have no second factor yet?
The confirm prompt tells you to set one up under Account security. An authenticator app and a passkey both work.
Does the log store email addresses?
No. Rows hold ids. A person appears by name only where you may see it, otherwise as a short id or as invited, pending.
How fast does signing out reach the apps?
Apps check with herbe ID about every five minutes, so an app ends your session within about five minutes of you signing out.