Access Records and Audit Log
What Rainbow DJ Lab records today about access to family data, and the full access audit log that is being built as a launch requirement.
The honest answer
The Lab does not yet have a full audit log of who viewed or changed family data. Building one is a launch requirement: no class runs until it's in place. See the launch checklist.
The class app does keep some records today. This page lists exactly what they are, and what they don't cover.
What is recorded today
| Record | What it holds | What it tells you |
|---|---|---|
| Coach sign-in link records | The coach's email, when a sign-in link was requested, when it expires, and whether it was used | Which coaches requested access to the app, and when. Only emails on the Lab's coach list can request a link |
| Recap emails sent | For each child and session: that a recap email was sent, and the time | Which families were emailed a recap, and when |
| Sign-out records | Who picked the child up, their relationship, whether photo ID was checked, whether it was a written-permission self sign-out, the coach who released the child, and the time | Every release at pickup, and who checked ID |
| Check-in times | The time each child was checked in, per session | Attendance |
| Registration time | When each registration was submitted | When a family registered |
What is not recorded yet
- Which coach viewed a family's private details (contact information, medical notes, pickup list), and when.
- Which coach changed a child's record, and what changed.
- Exports or copies of family data.
These gaps are why a full access audit log is a launch requirement.
Not related: the partner tracker
Ras Tafari Inc. keeps a separate tracker of activity with partner organizations about the wider Full Spectrum program. It's unrelated to the Lab's family data, holds no child or family information, and is not an audit log of the class app.
The full audit log we're building
Before the first class, the audit log will record, for every access to private family data:
- who (which signed-in coach)
- what (which child's record, and which fields were viewed or changed)
- when (date and time)
- what changed (the old and new values for edits)
And it will be:
- protected: coaches can't edit or delete log entries
- reviewed: checked regularly by Stephen Henry, and by another officer for Stephen's own access
- available to you: on request, we'll tell you who has accessed your child's private record, within 10 business days. See your data rights
We'll update this page when it's built.
Questions
Stephen Henry, 872-255-9333, stephen@selassiefest.com.