True Care SystemTrue Care SystemDocumentation
Return to Website

CONTROLLED EVIDENCE EXPORT

Exporting Audit Logs

Export authorized results while preserving accountability and data protection.

Privacy, HIPAA, and audit-evidence notice

Audit records may contain workforce identities, Provider identifiers, Individual references, IP addresses, device details, routes, request metadata, support-session identifiers, and before-and-after values. Screenshots in this public guide use redacted or demonstration information. Production access must remain Provider-scoped, role-based, purpose-limited, and restricted to authorized personnel.

Audit evidence and Provider governance

True Care System records audit evidence to support accountability, privacy review, security investigation, operational integrity, and Provider governance. These capabilities support—but do not replace—the Provider's policies, workforce training, risk analysis, legal obligations, incident response, and retention program.

Purpose

Audit exports support internal review, investigation, governance, and evidence preservation. Because exported files may contain sensitive identifiers, PHI references, IP addresses, routes, and user activity, export permission must be limited and the export action should itself be audited.

Export Controls

FieldFunction
Authorized scopeOnly records visible to the authenticated user's Provider and role should be exported.
Current filtersExports should reflect the selected date range, module, action, status, and search criteria.
Audit of exportThe system should record who exported, when, what scope was exported, and which format was used.
Secure storageFiles should be stored only in approved encrypted locations.
Secure transmissionUse approved protected channels when sharing exported evidence.
Retention and disposalFollow Provider retention, legal-hold, and secure-disposal procedures.

Before Exporting

  • Confirm the business purpose.
  • Apply the minimum necessary filters.
  • Verify the recipient and destination.
  • Avoid local or personal-device storage unless specifically authorized.
  • Document the investigation or compliance case associated with the export.