QRCode Suitefor WordPress
LoginStart free →
Documentation

Audit logs for compliance (SOC 2 + GDPR)

QRCode Suite writes a tamper-evident audit log for every administrative action — license changes, QR creation, exports, settings updates. The log answers the questions auditors ask: "who did what, when, from where?". Retention is configurable up to 7 years to match SOC 2 + GDPR record-keeping requirements.

  1. 1

    What gets logged

    Every admin action: user login, license activation/deactivation, QR create/edit/delete, bulk import, template change, integration toggle, API key creation, data export. Each entry records actor user id, action name, target entity id, IP hash (no raw IP), and timestamp.

  2. 2

    What does NOT get logged

    Read-only dashboard views are not logged by default (would generate excessive volume). End-customer scan events live in a separate `meliqs_scans` table with its own retention policy. Login passwords are never logged in any form.

  3. 3

    Retention and storage

    Default retention: 365 days. Configurable up to 7 years for SOC 2 / GDPR record-keeping. Audit logs live in `meliqs_audit_logs` with append-only writes — no delete or update permitted via the application layer. Backup snapshots are encrypted at rest.

  4. 4

    Export for auditors

    QR Suite → Admin → Audit Logs → Export. Choose a date range and event types, download as CSV or NDJSON. The export includes a SHA-256 checksum file — auditors can verify the log was not modified after export.

Frequently asked questions

What is QRCode Suite?

QRCode Suite is a premium WordPress plugin that generates branded, dynamic QR codes directly inside your WordPress dashboard. Scan data is stored on your own server — not on a third-party SaaS platform — and WooCommerce orders can be attributed to specific QR codes.

Does QRCode Suite require a separate subscription?

The Free plan is available at no cost. Paid plans (Pro, Business, Agency) are licensed per WordPress site and billed monthly or annually. There is no separate per-scan fee.

What QR code types does QRCode Suite support?

QRCode Suite supports 15 QR code types: URL, vCard, Wi-Fi, SMS, Email, WhatsApp, PDF, Coupon, Plain Text, Social profile, WooCommerce Product, WooCommerce Reorder, Link Hub, Phone, and Dynamic URL.

Can I change the destination of a QR code after printing it?

Yes. Dynamic QR codes use a short redirect URL. You can update the destination from your WordPress dashboard at any time without generating or reprinting the code.

Is QRCode Suite GDPR-compliant?

Yes. QRCode Suite hashes IP addresses with SHA-256 before storage so no raw IPs are ever saved. It also filters bot traffic automatically and includes configurable data-retention settings.

Need help getting started?

Download the free plugin or browse all documentation.

Download pluginAll docs