Autoboeker

Security & privacy

What does an audit trail mean legally?

An audit trail is the control path from source document to booking. What the law asks about verifiability and retention, and what it means for AI bookkeeping.

Sebastian de Goeij 7 min read Updated

Short answer

Legally, an audit trail is the control path that shows how a figure in the books came about: which source document, who or what processed it, when, and with what changes. Dutch law does not use the term literally, but the tax retention obligation requires records that can be audited within a reasonable time. An audit trail is the practical way to meet that, especially when software and AI do part of the work.

Key takeaways

  • An audit trail shows who did what and when, from source document to booking and return.
  • The tax retention obligation requires auditable records; storing documents alone is not enough.
  • With automated booking, what the software did and why must be traceable too.
  • An audit trail is evidence in an audit, a client dispute or an internal review.
  • Autoboeker has audit logs in which every action by people and AI is traceable, with a confidence score and explanation per booking.

What is an audit trail?

An audit trail is the recorded chain of steps between a source document and the outcome in the books. For a purchase invoice: when and through which channel it arrived, how it was recognised, which GL account and VAT code were chosen, who approved it and whether anything changed later.

Unlike a plain archive, an audit trail keeps the route, not just the result, so an auditor can trace an item in the accounts or VAT return back to its document.

What does the law say about an audit trail?

Dutch law does not use the term, but the tax retention obligation amounts to it in practice. Businesses generally keep their records for seven years, in a way that lets the tax authority audit them within a reasonable time. That means showing how documents were processed, not just keeping them.

Beyond tax, a traceable path is evidence in disputes, and the GDPR requires you to demonstrate how personal data is handled, including who had access. This is not legal advice; consult a tax adviser or lawyer for a specific case.

  • Origin: which source document, when received and through which channel.
  • Processing: which choices were made, such as GL account, VAT code and cost centre.
  • Actor: which person or automated step did it.
  • Changes: what was adjusted afterwards, by whom and when.
  • Approval: who authorised it, before or after booking.

Why is an audit trail extra important with AI bookkeeping?

When software books invoices automatically, its step must be verifiable too. An auditor or partner wants to see why an invoice is on a given account and whether it was booked automatically or manually. Without that trail, automation becomes a black box that is hard to defend.

A good AI audit trail therefore also records the confidence of each booking and the information it was based on, so you can explain every booking and sample automated items afterwards.

How does Autoboeker record the audit trail?

Autoboeker has audit logs in which every action by people and AI is traceable. Every booking shows a confidence score and explanation, with a full audit trail, and can always be adjusted manually. Manual corrections are kept in the feedback history, so you see what the AI learned and why.

With approval before and after booking you define per administration who approves what. Those approvals are part of the trail too, so a firm can show per item where it came from, how it was processed and who reviewed it.

FAQ

Questions about this topic.

The law does not name it, but the tax retention obligation requires records that can be audited within a reasonable time. An audit trail is the practical way to show that.

Generally as long as the records themselves: seven years, and longer for some data. Check the Dutch Tax Administration for specific periods.

An archive stores documents. An audit trail also stores the steps between document and booking: who, what, when and with what changes.

Yes, if the software records what happened per booking. In Autoboeker every booking has a confidence score, explanation and an audit log entry.

Yes. Who authorised a document, and whether before or after booking, belongs to the control path.

See it working in your own administrations.

In a 30-minute demo, we show you how Autoboeker works with your firm's accounting software and way of working.

Cancel monthly · Free onboarding and check-ins · 30-day money-back guarantee

Exact OnlineTwinfieldSnelStarte-Boekhouden