# Security & Compliance

> From schema changes to data access, Bytebase records who did what, when, and why across every environment.

Source: https://www.bytebase.com/security-compliance/

---

## Always-on compliance for database operations

From schema changes to data access, Bytebase records who did what, when, and why across every environment.

## Created for continuous auditability

Bytebase captures database activity automatically and turns it into audit-ready evidence— without manual effort or after-the-fact reconstruction.

### Capture: Capture every database action automatically and continuously

All database-related activity is logged by default, creating a complete, tamper-resistant audit trail.

- **Audit logs**: Record all database changes and access activity
- **Advanced filtering**: Filter audit events by user, action, resource, or time
- **External log streaming**: Stream audit logs to external monitoring systems

### Approval Flow: Produce audit evidence without manual reconstruction

No more hunting through tickets and chat logs. Generate compliance reports directly from Bytebase.

- **Compliance reporting & exports**: Generate auditor-ready reports for SOC 2, GDPR, and HIPAA
- **Change approval history**: Show approved changes with full timestamps and context
- **Access review & verification**: Review active and expired access permissions at any time

## Clear roles, shared controls, and predictable workflows

### Executives & CTOs — Protect the organization

Reduce exposure from undocumented access and untracked changes.

### Executives & CTOs — Reduce audit preparation time

Eliminate manual evidence gathering and last-minute audits.

### Executives & CTOs — Establish operational standards

Create a clear, enforceable baseline for database governance.

### Security & Compliance Teams — Maintain continuous compliance

Support SOC 2, GDPR, and HIPAA without periodic scrambles.

### Security & Compliance Teams — Detect risky activity early

Gain full visibility into changes and access across environments.

### Security & Compliance Teams — Support investigations with confidence

Rely on complete, trustworthy audit trails for forensics.

### Engineering & Platform Teams — Eliminate manual audit work

Stop tracking approvals and evidence outside the system.

### Engineering & Platform Teams — Avoid security debt

Prevent forgotten access and undocumented changes.

### Engineering & Platform Teams — Move fast without breaking compliance

Operate securely without slowing development teams.

## Get Started

- [Book a demo](https://www.bytebase.com/demo/)
- [Start now (cloud)](https://console.bytebase.com)