# Audit logs and access control for your AI

Canonical URL: https://openorange.ai/privacy-and-audit/
Updated: 2026-10-25

Decide who can do what, keep spending in check and see a record of every privileged action, in your own private Sunport.

Your content stays in your own Sunport, encrypted at rest, and you choose how long requests are kept.

## Key capabilities

- Roles, allow and deny permissions, and spending limits for every person and agent.
- Every privileged action recorded in an audit log.
- Maintenance access opened from your dashboard and logged.

## Your data stays in your Sunport

Chats, uploads and request content stay in your Sunport, encrypted at rest on new Sunports, and you choose how long requests are kept and who may open them.

## Clem works within your permissions

Clem acts with the permissions of the person who asked, and deny permissions narrow what anyone can do, Clem included.

## A record of every privileged action

Privileged work is recorded in an audit log, with who asked and what ran.

## Questions

### Where are my requests kept?

Request content stays in your Sunport, encrypted at rest. While a request is processed, the software handling it and the configured model provider see its content.

### Can sensitive actions be blocked?

Yes. Deny permissions block specific actions for any person or agent, including Clem, and agents need a person’s approval before they run commands on a virtual machine.

## Related guides

- [Security](https://openorange.ai/security/)
- [Sunport](https://openorange.ai/operator-layer/)
- [AI activity](https://openorange.ai/ai-observability/)
- [Costs and usage](https://openorange.ai/model-usage-accounting/)

## Access and contact

OpenOrange is for individuals, teams and companies, and large companies already use it.

Create an account to start a free trial in a private Sunport of your own. Companies can email us for custom terms.

Start free: https://app.openorange.ai/sign-up?ref=privacy-and-audit&cta=markdown
Sign in: https://app.openorange.ai/sign-in?ref=privacy-and-audit&cta=markdown
Contact: contact@openorange.ai

## Available languages

- [English](https://openorange.ai/privacy-and-audit.md)
- [Deutsch](https://openorange.ai/de/privacy-and-audit.md)
- [Español](https://openorange.ai/es/privacy-and-audit.md)
- [Français](https://openorange.ai/fr/privacy-and-audit.md)
- [Italiano](https://openorange.ai/it/privacy-and-audit.md)
- [Português](https://openorange.ai/pt/privacy-and-audit.md)
- [Русский](https://openorange.ai/ru/privacy-and-audit.md)
- [Türkçe](https://openorange.ai/tr/privacy-and-audit.md)
- [Bahasa Indonesia](https://openorange.ai/id/privacy-and-audit.md)
- [Tiếng Việt](https://openorange.ai/vi/privacy-and-audit.md)
- [हिन्दी](https://openorange.ai/hi/privacy-and-audit.md)
- [ไทย](https://openorange.ai/th/privacy-and-audit.md)
- [日本語](https://openorange.ai/ja/privacy-and-audit.md)
- [한국어](https://openorange.ai/ko/privacy-and-audit.md)
- [简体中文](https://openorange.ai/zh/privacy-and-audit.md)