Every audit entry signed; each signature includes the hash of the previous entry. Removing or editing one entry breaks the chain — provably. Verification UI built in. Compliance-grade evidence without a third-party service.
Nobody can promise a database row is unreachable. What you can promise is that changing one breaks something visible.
A signature covering the previous entry's hash makes the log a chain. Remove an entry in the middle and every signature after it fails.
Verification runs in the UI and reports where a chain broke, which is what a SOC 2 or ISO 27001 reviewer actually wants to see.
Every audit row is signed as it is written, with a key kept out of reach of the application that writes them.
Each signature commits to the hash before it, so removing or editing one row breaks every row after it.
A verification pass walks the chain and shows where it breaks — which is the demonstration an auditor actually asks for.
Audit Log Signing on Enterprise.