From statement to transaction
Drill from a P&L or balance sheet line to the GL detail behind it.
Netsuite · Audit Trail
Click a number. Find its source.
Every figure in RIOO can be traced to the transaction behind it and the operational record that created it: the lease, the invoice, the payment, the work order. Every workflow step records who acted and when.
Audit trailNetSuite roles
- ControllerApprove journalsAllowed
- Property managerApprove bills ≤ $5kAllowed
- Leasing agentView GLRestricted
- TechnicianClose work ordersAllowed
09:41Bill VB-2207 approved · M. Chen09:44Posted to GL · system
Why traceability is a property problem
Property finance is high-volume and detail-heavy. An auditor's sample might include a rent concession, a CAM charge, a deposit refund and a repair invoice, each across different systems in a typical stack. Finding support means searching email, PDFs and exports. When the operational records live with the financial ones, support is a click away.
Explore by topic
Audit expectations by market and entity type
United States
Public REITs and their subsidiaries are subject to SOX internal control requirements, and private funds often face similar expectations from lenders and investors. Auditors test controls over revenue, payables and access, so documented approvals and role reviews in NetSuite carry real weight.
United Kingdom
Letting and managing agents holding client money must belong to a client money protection scheme and keep client funds in designated accounts. Clear separation between client and office money, supported by reconciliations, is the evidence most often requested. See deposit protection and client money.
Australia
Licensed agents who hold rent and bonds on behalf of owners operate trust accounts that are subject to state rules and periodic external audit. Receipt-level traceability from tenant payment to owner disbursement is the core of that audit.
Singapore and the UAE
Companies in both markets prepare audited financial statements under local requirements, and lenders frequently ask for property-level support. In the UAE, VAT records must be retained for several years, so linking each charge to its tax code and source document matters. Confirmretention periods to state
What is an audit trail in property accounting?
An audit trail in property accounting is the linked chain of records showing how a reported figure came to exist: the lease or work order that started it, the charge or bill that recorded it, who approved it, and the resulting general ledger entry. On RIOO every link is a NetSuite record with history.
Two kinds of history matter. Transaction history shows the business chain, for example a resident request leading to a work order, purchase order, vendor bill and payment. Change history shows what happened to each record after it was created: who edited a rent amount, who changed a vendor's bank details, who reopened a period. NetSuite captures change history in system notes on each record, which RIOO records inherit because they are NetSuite records.
How it works
How does audit trail work in RIOO?
Audit trail in RIOO runs inside Oracle NetSuite. The properties, units, leases, tenants and vendors it uses are native NetSuite records, so each step updates the same data finance reports on. There is no separate system to sync, and every action keeps an audit trail. The steps below show how the work flows.
- 01
Business events create records
inside NetSuite: lease, invoice, payment, bill and work order.
- 02
Workflows log every action
who, what, when.
- 03
Transactions link
to their originating records.
- 04
Reports drill down
from summary to detail to source.
How it works
How does an auditor sample walk work in RIOO?
An auditor sample walk in RIOO starts from a figure in the trial balance or a selected transaction and follows saved links back to the source and forward to the bank. Most selections can be supported from within NetSuite without exports, because the lease, work order, approval and payment are all linked records.
- 01
Select
The auditor picks a revenue line, an expense or a balance, such as deposits held.
- 02
Drill
Open the GL detail, then the transaction behind it.
- 03
Source
Follow the link to the lease, purchase order or work order that created it.
- 04
Approve
Show the approval history and the role of each approver.
- 05
Settle
Show the payment or receipt and its bank reconciliation.
- 06
Change
Display system notes to prove the record has not been altered since approval.
In detail
What you can trace
From transaction to source
Open the lease behind a rent charge, the work order behind a repair cost, or the PO and receipt behind a vendor payment.
From record to history
See who created, approved or changed it, and when.
Signed documents
Executed agreements are stored with an audit trail so the original can't be altered.
Communications
Notices and reminders logged to the tenant profile.
In detail
Controls that support audit
Role-based access and segregation of duties
Approval chains with recorded approvers
Three-way matching for payables
Period management in NetSuite
NetSuite's system audit log for record changes
Audit season, prepared
Most audits start with a prepared-by-client list: rent rolls, tenant ledgers, deposit schedules, AP aging, fixed asset rollforwards and support for sample transactions. With one system of record, each item is a report or a drill-down rather than a reconciliation. The GL detail report becomes a way to trace a property number back to its source, not a puzzle.
In detail
How do teams put audit trail into practice?
Teams put audit trail into practice by configuring RIOO to their own policies, training each role on real scenarios and starting with one property or workflow before rolling out further. The examples below show how that typically looks, from set-up to day-to-day use, and which team owns each part of the work.
Auditor: "Show me support for this repair expense at Building 4."
With RIOO on NetSuite: open the journal or bill and follow its links to the vendor invoice, the matched purchase order, the work order with technician notes and photos, the approving manager and timestamp, and the original resident request. One trail, retrieved in minutes.
RIOO doesn't certify compliance, but it makes this evidence easier to produce. Confirmany formal certifications before referencing
Lease agreements supporting revenue
Rent roll reconciliations to the GL
Deposit liability support
Vendor invoices with approvals
Fixed asset additions and disposals
User access and segregation-of-duties evidence
In detail
Segregation of duties for property finance
Segregation of duties stops one person from both creating and approving the same money movement. In NetSuite it is enforced through roles and permissions, which RIOO uses for property-scoped access. Confirmrecommended RIOO role templates
Vendor master data
People who add or edit vendor bank details should not approve or release vendor payments.
01
Lease terms
Leasing staff draft leases and amendments; a manager or finance role approves rent changes and concessions.
02
Cash application
The person applying tenant receipts should not also be able to write off balances or issue refunds.
03
Journal entries
Manual journals above a threshold require approval by someone other than the preparer.
04
Period close
Only the controller role can close or reopen accounting periods.
05
User administration
Administrators who grant roles should not hold transactional finance roles.
06
Mapped to NetSuite
Which NetSuite features provide audit evidence for RIOO records?
NetSuite provides audit evidence for RIOO records through system notes on every record, the login audit trail, transaction audit trails, approval history on workflows and period close controls. Because RIOO stores leases, charges and work orders inside NetSuite, these standard features cover property activity without a separate logging tool.
Confirmapproval history visibility for each RIOO workflow
- Audit questionWho changed this lease rent?NetSuite sourceSystem notes on the lease recordOld value, new value, user, date
- Audit questionWho approved this vendor bill?NetSuite sourceWorkflow approval historyApprover, role, timestamp
- Audit questionWho signed in and from where?NetSuite sourceLogin audit trailUser, role, IP address, time
- Audit questionWas a closed period changed?NetSuite sourcePeriod close and transaction audit trailPostings after lock, by user
- Audit questionWhat supports this revenue?NetSuite sourceLease linked to invoice and GL lineExecuted lease, charge schedule
Who is RIOO's audit trail NOT a substitute for?
RIOO's audit trail is not a substitute for an internal control framework, an internal audit function or an external auditor's opinion. It provides traceable records and enforces the controls you configure, but deciding which controls are required, testing them and concluding on their effectiveness remains with your finance team and auditors.
It also does not reach activity outside NetSuite. Spreadsheets used for side calculations, approvals given by email, and documents stored on personal drives are not covered, so the strongest evidence comes from moving those steps into RIOO workflows rather than attaching them afterwards.
Audit trail in practice
An auditor selects a $12,400 repair expense at one property. The controller opens the GL line, clicks through to the vendor bill, the PO, the receipt and the work order, then the original resident request with photos, along with each approver and timestamp. It takes two minutes, not two days.
What changes
What changes when audit trail runs on NetSuite?
When audit trail runs on NetSuite through RIOO, operational work and accounting stop being two separate jobs. Transactions post to the general ledger as they happen, reports use the same records as daily work, and controls come from NetSuite roles and approvals. The changes below are the ones teams usually notice first.
- Faster auditswith less disruption.
- Stronger controlswith recorded approvals.
- Quicker dispute resolutionwith tenants and vendors.
- Confidencein every reported number.
Checklist
Quarterly access review checklist
- Export active users with their roles and the properties or subsidiaries each can access.
- Remove leavers and change roles for people who moved teams.
- Check that no user holds both vendor maintenance and payment approval permissions.
- Review users with administrator or full-access roles and confirm each one is still needed.
- Sample login audit trail entries for unusual times or locations.
- Record the review date, reviewer and changes made as evidence.
Talk to a specialist
See audit trail on your own portfolio.
Every workflow step records who acted and when.
Can we see who approved a payment?
Yes. Workflow actions record who acted, when and what changed, so each vendor payment shows its approvers, their roles and timestamps alongside the bill and purchase order. Because the approval history is stored on the NetSuite record, auditors can review it directly rather than relying on forwarded emails or exported approval logs.
Are signed leases protected?
Yes. Executed agreements are stored with an audit trail, linked to the lease record that drives charges, so the signed version can be retrieved alongside the rent schedule it supports. Later amendments are stored as separate signed documents rather than overwriting the original, which preserves the full contractual history for audit and dispute resolution.
Can we drill from consolidated results to a single transaction?
Yes. From a consolidated statement in NetSuite you can drill into a subsidiary, then a property, then the GL detail and the individual transaction, and from there open the lease, work order or purchase order that created it. The same path answers auditor sample requests without exports or spreadsheets.
Does RIOO guarantee audit outcomes?
No software can guarantee an audit outcome. RIOO gives you traceable records, recorded approvals and documented controls inside NetSuite, which make evidence faster to produce and easier to verify. The design and operation of your controls, and the auditor's conclusions about them, remain with your finance team and your external auditors.
Can anyone delete a posted transaction in RIOO?
Deletion is controlled by NetSuite role permissions, and most finance teams restrict it so posted transactions are corrected by reversal or credit instead. Where deletion is permitted for a role, NetSuite records the deletion in its audit trail with the user and time, so the action remains visible to reviewers and auditors.
How long is audit history kept?
System notes and transaction history are kept with the records in your NetSuite account for as long as the records exist, so a lease amended years ago still shows its change history. Retention rules for your own documents and backups should follow the legal requirements in each market where you operate. Confirmany NetSuite log retention limits to state
Related
Related to audit trail
Make every number explain itself.
