A name against every action, ready for the auditor.
In most systems the answer to "who changed this" is a service account, which is not an answer an auditor accepts. In Saga every action, from signing in to issuing a certificate, is recorded against the named person who took it.
The actions that manage training are on record too.
The audit log covers sign-ins and sign-outs, failed sign-in attempts, and changes to users and groups. It also records edits to programs and content, assignments, enrollments, and progress resets, along with exam submissions, certificates issued, settings changes, and reminder emails, which are logged per recipient.
Each entry carries the name of the person who acted and the name of the record affected. An auditor's question is therefore answered without a database administrator.
The record an auditor asks for is found on one screen.
Records are searched, filtered, and exported from the same place. The list for an auditor needs no custom query and no request to a developer.
Full-text search. Search runs on the server, across every record. Results are sortable and scroll continuously back to older entries.
Date range. A calendar range or a quick preset narrows the log to the period in question.
Export. Every record matching the filters exports as CSV, and enrollment and exam-result reports export the same way.
Mail log. Every email sent is recorded with its recipient, subject, delivery status, and full content. Whether an employee was notified is shown from that record, with the message exactly as it was sent.
The ISO 27001 documentation set ships with the product.
Saga is delivered with a Statement of Applicability for ISO/IEC 27001:2022 and an information security management system document set. The security questionnaire is answered before it is sent, and a team preparing for its own audit does not start from a blank page.
Accessibility is verified to WCAG 2.2 AA on every release by an automated axe-core gate in continuous integration. The application is hardened against the OWASP Top 10, and its verification is aligned to ASVS Level 2.
Meet your next audit with the records Saga keeps.
Tell us which records you are asked to produce and which standards you work to. We will structure the demonstration around those records.
Request a demo