Audit, Compliance & Evidence

This is where Handlebar becomes your compliance team’s favorite tool.

Event Immutability

Every tool call, rule evaluation, and action is logged immutably.

This isn’t just good practice. In regulated industries, it’s a requirement.

Evidence Extraction

Handlebar makes it easy to pull evidence for:

• Internal audits
• Regulatory inquiries (HIPAA, SOC2, etc.)
• Incident investigations

You can filter by:

• Time range
• Agent
• Tool
• Action taken (e.g., “show me all blocked tool calls”)
• Rule triggered

Export formats include JSON, CSV, and structured compliance reports.

Regulatory Mapping

We’re building explicit mappings to common compliance frameworks:

• SOC2: Access controls, audit logging, change management
• Internal audits: Custom rule sets, custom reporting

This is still in progress, but the foundation is there. And it’s designed to extend.