Audit trail and security

All AI agent interactions are logged for audit and compliance purposes.

Audit events: Each “Explain the tax” request is logged with user ID, transaction ID, timestamp, and explanation type requested. Follow-up questions are also logged with contextual information.
Security: All AvaTax API calls are executed through secure MCP using existing connector authentication. The AI agent doesn’t store credentials. Data access follows the user’s existing role permissions.
Data handling: Transaction data retrieved for explanation purposes isn’t persisted beyond the active session. Explanations are generated in real time.
Compliance: Explanation logs can be exported to support SOC 2 compliance and internal audit requirements.