10 July 2026
Audit log requirements for SOC 2, ISO 27001 and PCI DSS
What SOC 2, ISO 27001 and PCI DSS each require from audit logs: events, integrity, retention and review, plus one design that satisfies all three.
Writing
Notes from the registry.
On provable records, audit evidence, and the design decisions behind Sigilbase. Subscribe with the Atom feed; there is no newsletter and no tracking of readers.
10 July 2026
SEC Rule 17a-4: WORM storage vs the audit-trail alternative
What the SEC's 2022 amendments to Rule 17a-4 changed, what the audit-trail alternative actually requires, and how to evaluate systems against either path.
10 July 2026
How to prepare audit evidence for SOC 2: an engineer's guide
What SOC 2 auditors request, how to collect evidence continuously instead of scrambling, and how to make records trustworthy, with a 90-day plan.
Join the waitlist
Building now. Early access for teams preparing SOC 2, ISO 27001, or PCI DSS evidence.
Could not save your email. Try again or write to hello@sigilbase.io.
No spam, one email when it opens.