Make your Business Central environment audit-ready

This is a build-to-order extension for Microsoft Dynamics 365 Business Central — not an instant AppSource download. ECOSIRE scopes your control requirements, builds the extension in AL (table/page extensions plus event subscribers on posting and permission events), then installs it as a per-tenant extension directly on your Online or on-premises BC environment and supports it afterward.

Business Central ships a native Change Log and permission sets, but it stops short of what an internal auditor actually needs: it logs many fields but not in an auditor-friendly export, it has no built-in segregation-of-duties (SoD) conflict matrix, and it surfaces no proactive anomaly alerts. This extension closes those gaps.

We subscribe to the standard posting events (OnAfterPostGenJnlLine and document-posting publishers) and to Permission/Access Control table triggers to record field-level before/after values with the user, session, and timestamp. A configurable SoD conflict matrix (e.g. create vendor vs approve payment, post journal vs modify posting setup) is evaluated against assigned permission sets and flags violations on a role-center cue. Posting and journal anomaly detection (out-of-period dates, round-number reversals, weekend postings, dimension gaps) runs on a job queue entry. Period lock and approval controls extend the native Accounting Periods and approval workflow with hardened overrides that are themselves logged.

For external audits, a one-click audit export package produces a structured workbook plus a CSV/JSON change-trail file — also reachable via the BC REST/OData v4 API for your GRC tooling or a Power BI / Dataverse pipeline. Because it is your own per-tenant extension, you keep the source, the data stays in your tenant, and ECOSIRE handles BC release-cycle compatibility.