# Security alerts and account access

Review access events and distinguish integrity findings from application failures.

## Security alerts

Inspect the affected transaction, finding time and verification result. A record that cannot be verified is different from an application error. Follow the institution’s incident process rather than reporting unverifiable evidence as verified.

## Content access

Content and comparison actions require an authorised session and the correct institution and environment. Access to sensitive content is recorded in the audit trail. Knowing a transaction ID does not grant access to another institution’s record.

## Account and password

Use My account to review identity and change the password. A user password is not an SDK service credential. Assign individual accounts according to the institution’s access policy.

## Account activity

With the appropriate permission, inspect record access, comparisons and downloads under Account activity. Actor attribution depends on actual session and audit evidence; an unknown actor is not inferred.