HIPAA Audit Log

Access & action audit trail (HipaaAuditMiddleware) — non-device software (FD&C Act §520(o)(1)(D))

🔒 No PHI is present in this log. Each entry records only the request line (user, role, action, method, path, status) — never a request body or query string. Any PHI-bearing value is pseudonymized server-side (PSN-…) before it is returned.