Compliance Documentation
NIST 800-53 Alignment for AI Chatbots and Agents for Municipalities
This document explains how CityDesk aligns with key NIST 800-53 controls, focusing on AU-11 (Audit Record Retention) and SI-12 (Information Management and Retention). It highlights CityDesk’s tamper-evident audit trail, configurable retention for different record types, archiving of audit logs before deletion, and legal holds, and lists the evidence municipalities can request to demonstrate compliance.
NIST 800-53 Alignment for CityDesk
CityDesk supports common NIST 800-53 controls that municipalities may be asked
to follow for security and records management. This document focuses on AU-11
(Audit Record Retention) and SI-12 (Information Management and Retention).
AU-11: Audit Record Retention
CityDesk provides:
A tamper-evident audit trail of user activity, AI actions, and system changes
Configurable retention for audit logs to match your records schedule
Archived audit logs prior to deletion to preserve integrity
Evidence you can request:
Audit log exports
Audit log retention settings
Retention job history showing enforcement
SI-12: Information Management and Retention
CityDesk provides:
Separate retention periods for conversations, files, and audit logs
Retention settings by department or project
Legal holds to preserve records during litigation or public records requests
A retention audit trail documenting deletions
Evidence you can request:
Retention policy summary by department or project
Legal hold records
Retention deletion reports