Hash-chained audit trail, data residency, and SCIM provisioning

Three things that come up in every security review before a team lets an agent near production data.

• Tamper-evident audit trail: each audit record is hash-chained to the one before it, so an entry cannot be altered or removed without breaking the chain. Older records move to cold storage automatically, which is what makes longer retention windows affordable.
• Data residency: a project can be pinned to US or EU processing, and the proxy enforces it rather than treating it as a preference. Region discovery keeps a connection from being served outside the residency you set.
• SCIM 2.0: provision and deprovision org members from your identity provider. Paired with separation-of-duties roles, so the person who approves a policy change does not have to be the person who can also rotate credentials.

To be explicit about what these are: they are the controls a reviewer asks for. PgBeam is not SOC 2 or HIPAA certified, and none of this claims otherwise.