Make archive actions attributable and reviewable.
Separate safe preparation from destructive execution, preserve an action history, and keep path-bearing metadata protected at rest.
Evidence built into the workflow
Audit events capture actor, action, team scope, target, outcome, request context, and redacted action-specific metadata. Team owners see their scope; site administrators can review system-level activity.
Retention without silent erasure
The maintenance workflow archives old audit rows as NDJSON into the team’s own S3 log location before deleting the database copy. That preserves custody in customer infrastructure.
Least privilege by operation
A user can preview and create non-destructive archive copies without being able to delete production data or initiate paid Glacier retrieval. Bucket repointing remains owner-only by default.
Operator noteData Convoy supplies technical controls and records; it does not by itself make an organization compliant with a named framework.
Your buckets. Your workers. Your control.