AccessAudit

AccessAudit is a web app (with optional desktop agent) that continuously checks a library’s integrated library system (ILS), discovery layer, and key vendor platforms for privacy, retention, and access-control risks. It maps where patron data exists, flags risky configurations (overlong circulation-history retention, overly broad staff permissions, insecure exports), and produces board-ready compliance reports for state privacy laws, internal policies, and common audit requests. Instead of pretending to “integrate with everything,” the MVP focuses on the 3–5 most common systems via read-only connectors and log ingestion, then expands. It includes a plain-English remediation checklist and change-tracking so staff can show what was fixed and when. This is not a magic button: libraries still need to act on findings, and some vendors won’t expose enough telemetry. But it turns a painful, manual, spreadsheet-driven process into a repeatable workflow.