# Audit Trail & PDF Export - Regulatory Evidence of Pre-Publish Compliance | RegenCompliance

Every scan is a permanent timestamped record of pre-publish compliance review. Export any scan as a PDF for legal files. Evidence of compliance program when regulators ask.

Canonical page: https://regencompliance.ai/tools/audit-trail


## What it is

The audit trail captures every scan performed through RegenCompliance - timestamp, user, content scanned, compliance score, flagged phrases, rule citations, rewrites accepted, and decisions made. It persists in your account permanently, exportable as PDF. When regulators ask for evidence of compliance diligence, the audit trail is that evidence.


## Capabilities

- **Permanent timestamped record of every scan**: Every scan performed creates a permanent record with date, time, user, content scanned, compliance score, and all flagged phrases with rule citations. Records don't expire, get auto-deleted, or rotate out.
- **Full decision logging**: Each scan logs which flags were accepted, which rewrites were chosen, which phrases were marked acceptable-with-review, and who made each decision. The full decision chain is preserved.
- **PDF export for legal files**: Any scan or range of scans exports as a formatted PDF suitable for inclusion in a legal file, regulatory response, or internal compliance documentation. Professional formatting, not just a data dump.
- **Score trends over time**: The dashboard tracks compliance score trends across your scans, so you can identify recurring flag patterns, watch improvement over time, and monitor staff adherence at a glance.
- **Search and filter**: Search across all scans by keyword, date range, score threshold, user, or flag category. Find specific scans instantly. Produce filtered exports for specific regulatory responses.
- **Team-level visibility**: Compliance officers or marketing leads can see all scans across team seats. Individual users see their own scans. Permission structure supports both team-wide oversight and individual accountability.


## How it works

1. **1. Every scan automatically logs**: No separate step required. When a scan runs, the full record captures automatically - content, flags, rewrites, decisions, user, timestamp. Nothing manual.
2. **2. Browse your scan history**: Dashboard shows all scans sortable by date, score, user, content type. Click into any scan to see full detail - original content, flags, rewrites accepted, final content.
3. **3. Export as needed**: Any scan exports as a PDF formatted for legal and regulatory use - score, flags, citations, rewrites, and timestamp in a presentation-ready layout.
4. **4. Search when you need to find something**: Search works across all scan content, flag categories, and metadata. Need every scan that mentioned 'Botox' in the last 90 days? Three clicks.
5. **5. Produce compliance documentation on demand**: If you need to demonstrate a compliance program - to an insurance carrier, an investor, a regulator - the audit trail is the documentation. No separate documentation to create or maintain.


## Use cases

- **Warning letter response documentation**: If your practice ever receives an FDA warning letter, the audit trail is what your attorney can use to show pre-publish compliance diligence. The difference between 'we didn't know' and 'we did know, we actively checked, here's our record' is the kind of documentation your attorney can draw on when shaping a response.
- **Insurance carrier documentation**: Healthcare malpractice and advertising liability insurance carriers increasingly want evidence of compliance programs. The audit trail provides that evidence as a byproduct of normal use.
- **Investor or acquisition due diligence**: Practices preparing for investment or acquisition face compliance-program due diligence. The audit trail is ready-made evidence of a functioning program.
- **Internal quarterly reviews**: Compliance officers review scan trends quarterly to identify problem content categories, staff adherence patterns, and improvement opportunities. The dashboard's score trend chart makes that review simple.
- **Staff accountability and training**: Managers see which team members run compliance reviews and which don't. Training gaps become visible. Accountability is built into the workflow.
- **State medical board complaint response**: If a state medical board receives a complaint about your marketing, the audit trail documents the compliance process your practice actually runs, which your attorney can use as part of the response.


## Included

- Permanent retention of all scan records (no auto-deletion)
- Full decision logging per scan
- PDF export with legal-file formatting
- Compliance score trend tracking
- Search across all scan content and metadata
- Date range, score, user, and flag filtering
- Team-level visibility controls
- Regulatory documentation templates


## What it is not

- Not a replacement for formal HIPAA audit log requirements - the audit trail documents compliance-program activity, not PHI access. HIPAA-specific audit logging for PHI is handled separately in your EHR and practice management systems.
- Not legal advice - the audit trail is factual documentation; an attorney interprets what the documentation demonstrates in a specific regulatory context.
- Not attorney-client privileged - scan records are business records. For privileged compliance discussion, work with counsel directly.
- Not auto-shared with any regulator - you control when and how the audit trail is used in any regulatory interaction.


## FAQ

### How long are records retained?

Indefinitely, during your active subscription. If you cancel, scan history remains accessible read-only for 90 days; you can export records as PDF during that window. After 90 days, records are deleted per our privacy policy.

### Is the audit trail legally admissible?

The audit trail is a business record - timestamped, consistent, contemporaneously created. Whether it's treated as admissible evidence in a specific proceeding depends on the proceeding's rules of evidence and how it's introduced. That's a question for your attorney. In practical terms, clinics with the audit trail have documented evidence of pre-publish compliance; clinics without it don't.

### Can regulators access my audit trail?

Only if you share it. The audit trail is your data, visible only to you and your team seats. We don't share it with regulators, auditors, or third parties. If you choose to provide it as part of a regulatory response, that's your decision made with counsel.

### What does the PDF export include?

A professional layout organized by scan - compliance score, every flagged phrase with its explanation and rule citation, suggested rewrites, and a timestamp. Formatted for inclusion in legal files or regulatory responses.

### Can my attorney see my audit trail?

Yes, if you share access. Most practices share specific exports or screenshots with their attorney rather than giving direct platform access, but you can invite your attorney as a team seat if that's useful.

### Does the audit trail include PHI?

Only if you include PHI in the content you scan. Most healthcare marketing content doesn't contain PHI - it's marketing copy, not patient records. We recommend not including PHI in scanned content unless specifically necessary; most marketing compliance questions don't require it.

### Can I bulk export everything at once?

Yes. Full account export (all scans, all data) is available as a single operation. Useful for backup, migration, or comprehensive compliance review.

---

RegenCompliance is FDA/FTC compliance scanning software for healthcare marketing, operated by Regen Portal LLC. Educational compliance tool, not legal advice. Not affiliated with the FDA or FTC. Contact: support@regencompliance.ai. Full site index for AI agents: https://regencompliance.ai/llms.txt