database
One database per company
Your company's data lives in a separate database: no tables shared with other customers.
shield_lock
Security & Traceability
Every change and every sign-in recorded automatically, in a log nobody can alter. Always know who did what, when and from where.
Everything You Need
history
Complete activity log
Every creation, change and deletion is recorded with author, date and time, and the values before and after.
login
Sign-in log
Administrators see who signed in to the software, the customer portal or a kiosk, when, from which IP address and on which device.
lock_clock
Lockout after failed attempts
Too many wrong passwords or PINs temporarily lock the account, in the software, the portal and on kiosks. The lockout shows up in the sign-in log.
verified_user
Tamper-proof logs
Log entries cannot be changed or deleted, not even by administrators.
visibility_off
Sensitive data masked
Passwords, PINs, tokens and technical credentials never end up in the logs: you only see that they changed.
policy
Privacy by design
IP addresses anonymised after 90 days and limited retention (24 months for activity, 12 for sign-ins), as the FADP and GDPR require.
admin_panel_settings
Roles and permissions
Every operation is checked on the server against the user's role and permissions, not just in the interface.
support_agent
Support interventions tracked
If Lema support works on your data, the change appears in your log as “System administrator”.
smart_toy
AI leaves a trace too
Changes made through the AI assistant, the customer portal, kiosks or imports are recorded and recognisable.
account_balance
Immutable accounting
Posted entries are never deleted: they are reversed with a reason, in a dedicated accounting log.
backup
Automatic backups
Nightly backups of every company's database, with configurable retention.
Benefits
- check_circle Instant answers to “who changed this?”, without asking around
- check_circle Transparency towards partners, auditors and accountants: history cannot be rewritten
- check_circle Spot suspicious sign-in attempts right away thanks to account lockouts
- check_circle FADP/GDPR compliance with no setup: automatic retention and anonymisation
- check_circle All included in the software, no external audit tools
Frequently asked questions
Who can see the activity log? expand_more
Only the company's administrators. Other team members have no access to the log.
How long is the data kept? expand_more
Activity for 24 months, sign-ins for 12 months. The full IP address is anonymised after 90 days. Expired entries are deleted automatically.
Can Lema support see or change my data? expand_more
Every support intervention is recorded in the platform's security log, and any change to your data appears in your activity log as “System administrator”.
Do passwords end up in the logs? expand_more
No. Passwords, PINs, tokens and email server or API credentials are always masked.
Do I need to turn anything on? expand_more
No, logging is automatic and always on. You find the log under Settings → Security log.
Try Lema
Get in touch and we'll show you Lema in action.
event_available Write to us for a demonstration