Security alerts and account access

Inspect the affected transaction, finding time and verification result. A record that cannot be verified is different from an application error. Follow the institution’s incident process rather than reporting unverifiable evidence as verified.

Content and comparison actions require an authorised session and the correct institution and environment. Access to sensitive content is recorded in the audit trail. Knowing a transaction ID does not grant access to another institution’s record.

Use My account to review identity and change the password. A user password is not an SDK service credential. Assign individual accounts according to the institution’s access policy.

With the appropriate permission, inspect record access, comparisons and downloads under Account activity. Actor attribution depends on actual session and audit evidence; an unknown actor is not inferred.