View Document Details and Compliance Audit Trail

The document detail screen presents a comprehensive view of a single document's lifecycle. In addition to basic metadata (type, upload date, expiry, associated person), it shows the complete audit trail: who uploaded the document, who accessed or downloaded it, when signing events occurred, and any version changes. The audit log entries include user identity, timestamp, action type, and IP context. For global administrators, the view is identical but accessible across all organizations. All data is sourced from the document repository's audit log entries which are written immutably at each lifecycle event.

HIGH story-power-of-attorney-documentation-organization-administrator-004 5 pts

Story Points

High

Priority

Power of Attorney & Documentation Digitization

Feature

User Story

As a user

I want to view the full details of a single document including its type, signing status, access history, version record, and audit trail of who performed what actions and when

So that So that I can verify document validity for compliance purposes, investigate access anomalies, and provide evidence of proper document management during audits or legal proceedings

Acceptance Criteria

Given the user opens a document detail screen, when the page loads, then all document metadata is displayed including type, upload date, expiry date, associated person, and current signing status
Given the document has had multiple access events, when the user views the audit trail section, then all access events are listed chronologically with user identity, action type, and timestamp
Given the document has gone through the signing workflow, when the user reviews the signing history, then each signing event shows the signer's identity, method used (BankID or acknowledgment), and completion timestamp
Given the document has an expiry date, when the document detail is viewed within 30 days of expiry, then a prominent expiry warning is displayed with a call-to-action to initiate renewal
Given the user has download permission, when they click the download action, then a time-limited pre-signed URL is generated and the download event is logged in the audit trail

Business Value

An immutable audit trail is a legal requirement for organizations managing sensitive documents on behalf of vulnerable populations. The ability to prove who accessed a document, when it was signed, and who authorized changes protects the organization in disputes and demonstrates compliance with GDPR and Norwegian health information regulations. For coordinators managing many beneficiaries, audit trails also help detect unauthorized access early.

Components

Power of Attorney & Documentation Digitization

Related Feature

Organization Administrator

User Role