1. Home
  2. Other Releases
  3. On-premises 5.2
  4. Guides
    1. Start
    2. Administer
    3. Analyze
    4. Configure
    5. Deploy
    6. Install
    7. Migrate
    8. Secure
      1. Incorta Security Guide
      2. Secure Communication and Data
      3. Secure Access
      4. Secure Objects and Business Data
        1. Security Roles
        2. Reset Superuser Password
        3. Set Read-only Schema Access
        4. Runtime Security Filter
        5. Session Variables
        6. SOX Compliance
    9. Upgrade
    10. Content Manager
  5. Tours
  6. Concepts
  7. Tools
  8. References
  9. Integrations
  10. Data applications
  11. Releases

SOX Compliance

Incorta complies with the Sarbanes-Oxley Act of 2002 (SOX). Users cannot modify the data in Incorta. All updates are maintained by Incorta loader services. All data comes from customer sources, and Incorta is only used to summarize and visualize the data on dashboards. There are two ways to control the data that displays:

  • Schema definitions which control the data imported into Incorta
  • Dashboard definitions that control how the data is projected to the user

Incorta tracks all changes made to schemas and dashboards. Incorta comes with a dashboard which shows all changes made to these objects, by whom, and at what time. Auditors use this dashboard to track changes made in between audits.

Incorta tracks all activities in the system (for example, sharing content, logging in, sharing dashboard, and loading data from a dashboard) to see what user has downloaded content from the Incorta platform. All events are tracked and you can analyze them in an Incorta dashboard. Incorta maintains a history of changes made to any report definitions. Incorta provides data lineage to show the origins and references to data fields within the entire Incorta platform.