Audit & Internal Controls / Trail for Business Central

Name: Audit & Internal Controls / Trail for Business Central
Brand: ECOSIRE
SKU: bc-audit-internal-controls

Fonctionnalités clés

Field-level change log: captures before/after values, user, session ID and UTC timestamp via AL event subscribers on master and ledger tables, going beyond the native Change Log's field set

Auditor-friendly change-trail viewer page with filters by user, table, field, document number and date range, plus drill-down to the source record

Segregation-of-duties conflict matrix evaluated against assigned permission sets, with configurable conflict pairs and a Role Center cue listing live violations

Journal and posting anomaly detection: out-of-period dates, weekend/holiday postings, round-number reversals, missing mandatory dimensions and large single-entry thresholds

Job queue entry that runs the anomaly scan on a schedule and writes findings to a reviewable exception worklist with sign-off status

Period lock and approval hardening that extends Accounting Periods and the native approval workflow; every override is captured in the audit trail with justification

One-click audit export package: a structured Excel workbook plus CSV/JSON change-trail file scoped to a chosen date range and entity set

BC REST/OData v4 API endpoints exposing the change trail and exception log for GRC, SIEM or external audit tooling

Power BI and Dataverse integration path for continuous-controls dashboards built on the exported control data

User access review report listing each user's effective permission sets, SoD flags and last activity for periodic recertification

Tamper-evident logging: trail entries are insert-only with no edit/delete pages exposed, and deletions of source records are themselves recorded

Configurable retention and archival so historical trail data is preserved to your statutory audit-retention policy

Fait sur commande, clé en main

Aucune configuration à faire vous-même — une app fonctionnelle conçue, installée et prise en charge par ECOSIRE.

Vous commandez

Commencez par un prix de développement unique. Nous cadrons le projet avec vous au lancement.

Nous développons et installons

ECOSIRE la développe, la configure et l'installe sur votre Dynamics 365 Business Central.

Mise en ligne + assistance

Vous êtes en ligne en 2–4 semaines environ, avec une période d’assistance après le lancement.

À propos de ce produit

Make your Business Central environment audit-ready

This is a build-to-order extension for Microsoft Dynamics 365 Business Central — not an instant AppSource download. ECOSIRE scopes your control requirements, builds the extension in AL (table/page extensions plus event subscribers on posting and permission events), then installs it as a per-tenant extension directly on your Online or on-premises BC environment and supports it afterward.

Business Central ships a native Change Log and permission sets, but it stops short of what an internal auditor actually needs: it logs many fields but not in an auditor-friendly export, it has no built-in segregation-of-duties (SoD) conflict matrix, and it surfaces no proactive anomaly alerts. This extension closes those gaps.

We subscribe to the standard posting events (OnAfterPostGenJnlLine and document-posting publishers) and to Permission/Access Control table triggers to record field-level before/after values with the user, session, and timestamp. A configurable SoD conflict matrix (e.g. create vendor vs approve payment, post journal vs modify posting setup) is evaluated against assigned permission sets and flags violations on a role-center cue. Posting and journal anomaly detection (out-of-period dates, round-number reversals, weekend postings, dimension gaps) runs on a job queue entry. Period lock and approval controls extend the native Accounting Periods and approval workflow with hardened overrides that are themselves logged.

For external audits, a one-click audit export package produces a structured workbook plus a CSV/JSON change-trail file — also reachable via the BC REST/OData v4 API for your GRC tooling or a Power BI / Dataverse pipeline. Because it is your own per-tenant extension, you keep the source, the data stays in your tenant, and ECOSIRE handles BC release-cycle compatibility.

Ce que vous obtenez

A per-tenant Business Central extension (.app) authored in AL, installed on your Online or on-premises environment by ECOSIRE

Full AL source code and the compiled .app package handed to you, so the extension is yours to keep

Configured SoD conflict matrix and anomaly-detection rule set tuned to your chart of accounts, dimensions and permission setup

Configured job queue entry for scheduled anomaly scans plus the change-trail viewer and exception worklist pages added to relevant Role Centers

Audit export package templates (Excel + CSV/JSON) and, where requested, the OData/Power BI connection set up against your tenant

Setup-and-administration guide, an auditor user guide, and a post-go-live support and BC-release-compatibility window

Pour qui c'est

Internal Auditor / Controller

Needs a defensible, field-level audit trail and a live segregation-of-duties view to evidence financial controls during internal and external audits, without exporting the whole database by hand.

Finance Director / CFO

Wants period locks, approval hardening and anomaly alerts so that posting errors and control breaches are caught proactively rather than discovered after close.

BC Administrator / IT Compliance Lead

Responsible for permission sets and tenant governance; wants SoD conflicts surfaced automatically and a clean API/Power BI feed for continuous-controls monitoring without writing AL themselves.

Comment Audit & Internal Controls / Trail for Business Central se compare

Critère	ÉCOSIRE	Construction personnalisée	Concurrent
Field-level before/after change logging tuned for auditors	Inclus	Prise en charge partielle	Prise en charge partielle
Segregation-of-duties conflict matrix on permission sets	Inclus	Prise en charge partielle	Prise en charge partielle
Posting / journal anomaly detection on a schedule	Inclus	Prise en charge partielle	Prise en charge partielle
One-click external-audit export package (Excel + CSV/JSON)	Inclus	Prise en charge partielle	Prise en charge partielle
Built, installed and supported on your tenant by the vendor	Inclus	Non inclus	Non inclus
Full AL source code handed to you	Inclus	Inclus	Non inclus
Tuned to your chart of accounts, dimensions and permission setup	Inclus	Inclus	Non inclus
Kept compatible across BC spring/autumn release waves	Inclus	Prise en charge partielle	Inclus

Foire aux questions sur Audit & Internal Controls / Trail for Business Central

How long does delivery take, and how is it installed?

This is built to order. After a short scoping call we typically deliver in roughly 2 to 4 weeks depending on how many tables, SoD rules and export formats you need. ECOSIRE builds the extension in AL, validates it against your sandbox, then installs it as a per-tenant extension on your production Business Central environment. There is no AppSource download to wait on — we install and verify it directly on your tenant.

What about ongoing support and Business Central updates?

Every build includes a post-go-live support window. Business Central ships major updates twice a year (the spring and autumn waves), and ECOSIRE keeps the extension compatible across those releases, recompiling and re-validating it against each new runtime as part of your support agreement. You also receive the full AL source, so you are never locked out of your own controls.

Does this replace Business Central's native Change Log?

No — it complements it. The native Change Log is still available; this extension adds auditor-grade before/after capture on the fields you care about, an SoD conflict matrix, anomaly detection, hardened period locks and a proper export package, none of which BC provides natively. We can configure it to either coexist with the standard Change Log or be your single control surface.

Will the audit data leave our tenant?

No. Because this is your own per-tenant extension, all change-trail and exception data stays inside your Business Central tenant. The OData/REST API and any Power BI or Dataverse pipeline only move data if and where you choose to connect them, under your own authentication and credentials.

Can it integrate with our existing GRC or BI tooling?

Yes. The change trail and exception log are exposed through the Business Central REST/OData v4 API, so your GRC platform, SIEM or audit tool can pull from them directly. We can also wire a Power BI or Dataverse pipeline against the exported control data for continuous-controls dashboards as part of the build.