--- title: "Every knock at the door, written down · Privatta" description: "The access log, and the documents to bring to your security review." url: "https://royalsoftworks.com/products/privatta/security/access-log/" source: "https://royalsoftworks.com" format: "markdown" note: "Markdown rendering of the HTML page at `url`. Same content, same canonical URL." --- Security & privacy · 4 of 4 # Every knock at the door, written down. The access log, and the documents to bring to your security review. The record — Enterprise ## Every knock at the door, written down for good. On the Enterprise tier, Privatta keeps its own private log of every attempt to reach your files: who, from which device, which file, and whether it was allowed. Since 1.1 that covers internet sessions as thoroughly as local ones — the connection, every sign-in and refusal, each transfer and the disconnect — with each entry marked LAN or P2P. There is no delete button and no admin override: once an entry is written, nobody can remove or edit it, including you. Passwords never appear in it, and when a device tries its luck too many times, the connection locks until you approve it again. For your IT team - **Access log** — Local SQLite record: timestamp, channel (LAN or P2P), IP, machine name, MAC address, device ID, user, file, outcome. Passwords never written. Enterprise tier. - **Covers** — Sign-ins, refusals (including a wrong security code), file listings, denied files, completed and interrupted transfers, disconnects — on both transports since 1.1. - **Immutability** — There is no delete or clear operation in the code — the log is append-only by construction, not by policy. Entries are SHA-256 hash-chained, so an edit made outside the app is detected when the log is next opened. - **Brute-force defence** — Over P2P, 5 failed codes or passwords within 10 minutes lock the session until the host issues a fresh key. On the LAN, 20 failures from one address in 15 minutes are refused until the window passes. - **Privacy** — A request for a path that is not shared is refused without the disk being touched. access.log LAN 192.168.1.24 alice merger\_terms.pdf allowed LAN 192.168.1.31 bob payroll.xlsx no permission P2P 83.44.17.6 guest (security code) refused P2P 83.44.17.6 guest press\_kit.zip allowed LAN 10.0.0.9—(unknown device) sealed · banned ## Bring this to your security review. The full protocol detail — handshake sequence, identity model, NAT traversal — is documented for procurement and IT architecture teams. [Read the whitepaper](https://royalsoftworks.com/products/privatta/whitepaper/) [Talk to us](https://royalsoftworks.com/contact/?product=privatta) Free to download, no account · Pro €19 a month · Windows · Android · [Download free →](https://royalsoftworks.com/download/#privatta) [Previous Keeping the door shut.](https://royalsoftworks.com/products/privatta/security/keeping-it-shut/) [All of Privatta security](https://royalsoftworks.com/products/privatta/security/)