NIST 800-53 Audit and Accountability Compliance for Private Mendix Platform

Last modified: May 22, 2026

Introduction

Documents in this section provide more information about Private Mendix Platform's compliance with the Audit and Accountability (AU) category of the NIST 800-53 security framework. For each applicable control, we have listed which party (Mendix or the customer) is responsible for which component or aspect.

In general, Mendix is responsible for the Private Mendix Platform, Mendix Operator, Mendix Studio Pro, Mendix Runtime, and so on. Customer responsibilities are related to infra and organization processes. For more information, refer to detailed documentation below.


AU-02 (03) Audit Events Reviews And Updates

Documents the Private Mendix Platform's compliance with the AU-02 (03) control of the NIST 800-53 framework.

AU-03 Content Of Audit Records

Documents the Private Mendix Platform's compliance with the AU-03 control of the NIST 800-53 framework.

AU-03 (01) Content Of Audit Records - Additional Audit Information

Documents the Private Mendix Platform's compliance with the AU-03 (01) control of the NIST 800-53 framework.

AU-04 Audit Storage Capacity

Documents the Private Mendix Platform's compliance with the AU-04 control of the NIST 800-53 framework.

AU-04 (01) Audit Storage Capacity - Transfer To Alternate Storage

Documents the Private Mendix Platform's compliance with the AU-04 (01) control of the NIST 800-53 framework.

AU-05 Email Notifications

Documents the Private Mendix Platform's compliance with the AU-05 control of the NIST 800-53 framework.

AU 06 (01) Audit Review, Analysis, And Reporting - Process Integration

Documents the Private Mendix Platform's compliance with the AU-06 (01) control of the NIST 800-53 framework.

AU 06 (04) Audit Review, Analysis, And Reporting - Process Integration

Documents the Private Mendix Platform's compliance with the AU-06 (04) control of the NIST 800-53 framework.

AU-06 (10) Audit Review, Analysis, And Reporting - Audit Level Adjustment

Documents the Private Mendix Platform's compliance with the AU-06 (10) control of the NIST 800-53 framework.

AU-07 Audit Reduction And Report Generation

Documents the Private Mendix Platform's compliance with the AU-07 control of the NIST 800-53 framework.

AU-07 (01) Audit Reduction And Report Generation - Automatic Processing

Documents the Private Mendix Platform's compliance with the AU-07 (01) control of the NIST 800-53 framework.

AU-08 Time Stamps

Documents the Private Mendix Platform's compliance with the AU-08 control of the NIST 800-53 framework.

AU-09 Protection Of Audit Information

Documents the Private Mendix Platform's compliance with the AU-09 control of the NIST 800-53 framework.