Every action. Logged.
Every audit. Ready.
Centralized audit trail across every module, every action, every state transition. Compliance calendar tracking regulatory filings. Statutory return tracker. Evidence exports ready for SOC 2, ISO 27001, GST, Aadhaar Act, GDPR audits.
Tamper-proof
ledger
All modules
covered
Multi-format
exports
Auditor
self-service
How It Works
Audit Event Lifecycle
Tamper-Proof Ledger
Append-only. Period.
Audit log is append-only at the database layer — no UPDATE, no DELETE permitted, no admin override. Every action across every module flows in: create, update, delete, read of sensitive fields, login, permission change.
- Append-only DB tablespace (no UPDATE/DELETE)
- Cryptographic hash chain for tampering detection
- Every CRUD + sensitive read captured
- Login, logout, permission change events
- Configuration change events
- Indexed for fast search across millions of entries
Compliance Calendar
Filings, certifications, renewals.
Centralized calendar of every regulatory filing — GSTR-1, GSTR-3B, TDS returns, PF ECR, ESI, statutory audits, license renewals, ISO recertification. Reminders fire ahead of due dates.
- GST returns (GSTR-1, 3B, 9, 9C)
- TDS returns (24Q, 26Q, 27Q, 27EQ)
- Statutory (PF ECR, ESI, PT, LWF)
- MCA filings (DPT-3, MGT-7, AOC-4)
- ISO / FSC / FSSAI recertification
- Customer audit + financial audit scheduling
Auditor Workspace
Give the auditor a login.
Read-only auditor role with full visibility but zero modification rights. Auditor self-services queries instead of bombarding your team with data requests. Time-bounded access; expires after audit period.
- Read-only auditor role
- Time-bounded access (auto-expire)
- All transactions visible with drilldown
- Audit log self-service search
- Document download with watermark
- Auditor's own access fully logged
Evidence Exports
SOC 2. ISO 27001. GST. Ready.
Pre-built audit export packages — SOC 2 control evidence, ISO 27001 documentation, GST audit pack, Aadhaar Act §29 access logs, GDPR data subject request exports. Run, sign, deliver.
- SOC 2 Type II evidence package
- ISO 27001 control documentation
- GST audit pack (sales, purchases, ITC)
- TDS audit pack
- Aadhaar Act §29 access logs
- GDPR data subject request exports
Every Feature
Complete capability matrix.
Click any capability to drill in.
Integrations
Works with everything else.
Every Audit action flows into the other modules — no manual data re-entry, no reconciliation pain.
Audit→All Modules
Every action → audit log
Universal coverage
Audit→RBAC
Permission change → log
Track privilege escalations
Audit→Finance
GST audit pack
Export sales, purchases, ITC
Audit→HR
PII access → audit
Aadhaar Act §29 compliance
Audit→Notifications
Suspicious pattern → alert
Security team notified
Ready to modernize your mill?
See Papyrus BPApp
in your mill.
Book a personalized demo. We'll walk through every module relevant to your operation — from Deckle optimization to GSTR-3B compliance.