Merge pull request #4834 from segmentio/hipaa-eligible-note

Add "HIPAA Auditing" callout to HIPPA Eligible Segment page

Author: forstisabella

src/privacy/hipaa-eligible-segment.md

@@ -4,6 +4,7 @@ title: HIPAA Eligible Segment
 
 Segment is a HIPAA eligible platform, and meets the data privacy and security requirements of healthcare customers and their stakeholders. For more information about Segment becoming HIPAA eligible, see the [announcement blog post](http://segment.com/blog/segment-for-healthcare){:target="_blank"}.
 
+
 ## Business Associate Addendum
 
 > info ""
@@ -18,4 +19,16 @@ Ensure your Workspace is eligible for HIPAA before you configure and send any pe
 1. In your Workspace, navigate to **Settings > Workspace Settings**.
 2. On the **General Settings** tab, ensure that the HIPAA badge appears. This badge confirms that the Workspace is HIPAA eligible. ![HIPAA Eligible](images/hipaa-eligible.png)
 
-With the BAA signed and Workspace confirmed as eligible, you can start building. For more information about starting a HIPAA compliant implementation, see Twilio's [Architecting for HIPAA on Twilio](https://twil.io/architecting-for-hipaa){:target="_blank"}, which outlines the shared responsibilities and requirements for building and maintaining HIPAA-compliant workflows in Segment.
+With the BAA signed and Workspace confirmed as eligible, you can start building. For more information about starting a HIPAA compliant implementation, see Twilio's [Architecting for HIPAA on Twilio](https://twil.io/architecting-for-hipaa){:target="_blank"}, which outlines the shared responsibilities and requirements for building and maintaining HIPAA-compliant workflows in Segment.
+
+## HIPAA Auditing
+Segment maintains audit logs of every read and update action a user performs in the Segment app that may involve PHI/PII. 
+
+Data captured in the HIPAA audit logs includes:
+ - `workspace_id`: unique identifier of the workspace
+ - `actor_user_id`: unique identifier Segment assigns to the logged in user
+ - `event_type`: The action performed by the user. For example, `Source Debugger Raw Viewed`, `Destination Filter Modified`, or other events
+ - `end_user_id`: Segment sometimes assigns this unique identifier to an end-user, event, audience, or journey, depending on the event type
+ - `timestamp`: Time in UTC when the action occurred
+
+These logs can be provided upon request. For specific requests, please reach out to [[email protected]](mailto:[email protected]){:target="_blank"}.