Administrative evidence

Where supported by the product, administrative actions and lifecycle events can be recorded for operational review.

Service logs

Nginx, PHP-FPM, database, mail and other service logs provide technical evidence for troubleshooting and security investigations.

Log protection

• Restrict log access to authorised operators.
• Do not publish raw logs without reviewing sensitive content.
• Retain logs according to operational and legal requirements.
• Protect log integrity where auditability is important.