'%20stroke='url(%23em)'/%3e%3cellipse%20cx='30'%20cy='34'%20rx='26'%20ry='20'%20fill='url(%23gm)'/%3e%3cpath%20d='M12.5%2013.00L52.5%2021.74L52.5%2024.33L12.5%2017.60Z'%20fill='url(%23lm)'/%3e%3crect%20x='14.20'%20y='19.29'%20width='6.60'%20height='28.93'%20rx='1.45'%20fill='url(%23cm0)'/%3e%3crect%20x='27.00'%20y='21.24'%20width='5.60'%20height='24.81'%20rx='1.23'%20fill='url(%23cm1)'/%3e%3crect%20x='37.60'%20y='22.85'%20width='4.70'%20height='21.42'%20rx='1.03'%20fill='url(%23cm2)'/%3e%3crect%20x='46.60'%20y='24.22'%20width='4.00'%20height='18.53'%20rx='0.88'%20fill='url(%23cm3)'/%3e%3cpath%20d='M12.5%2050.00L52.5%2042.57L52.5%2044.26L12.5%2053.00Z'%20fill='%237fa3ff'%20opacity='.75'/%3e%3c/svg%3e)
PorticolGovernance
These pages are under Administration in the web client, for an organisation's owners and admins.
Audit log
Every security-relevant and data-changing action is written to the audit log: who did it, to what, when, whether it failed and, where known, from which address. Entries are chained by hash, and each shows whether its seal is intact, so a changed entry stands out.
Under Audit log, search by person, action, resource, outcome, time and text, and open an entry for its details. Download the log as CSV or JSON lines where the plan includes it. A custom role can be given the permission to read the log.
SIEM export
Under SIEM export, add destinations that receive the audit log as it is written:
- syslog (RFC 5424) over TCP or TLS
- CEF
- a signed JSON webhook
- S3-compatible object storage
Each destination gets the log in order, from the oldest entry kept, and every entry at least once. Entries carry their number and ID, so your SIEM can drop repeats. A destination that fails is tried again with growing waits, without holding up the others, and its delivery status shows. Pause a destination to stop it for a while.
Retention
Under Data, owners set how long the organisation keeps runs, monitor runs, request history, the audit log and replaced sync changes, within what the plan allows. A nightly job removes what has passed its period and records what it removed.
Export and delete an organisation
Also under Data, an owner can export everything the organisation holds as one zip file: members, groups, roles, workspaces, collections, environments, runs, settings and the audit log. Secret values stay out. The export is built in the background and downloads once, within 7 days.
Deleting an organisation removes everything it holds for good, after you confirm. No row of it is left.
Usage, billing and licence
Usage shows the seats and workspaces in use and this month's monitor runs and mock server calls, against what the plan allows. Counts start again on the first of each month; once one is used up, monitors skip their runs and mock servers refuse calls until then.
On Porticol Cloud, Billing shows the plan, seats, trial and invoices to owners, and changes the payment method through the payment provider's own pages.
On a team server, Licence shows the licence's standing, the seats in use and available, when it ends and when it was last checked. The server checks an online licence when it starts and every 12 hours. For a server with no internet access, import the licence file, and any revocation list, from this page. Until a licence is imported, the server runs as an evaluation.