Your comments

Native Dataverse audit works well in model-driven apps, but it’s hard to reuse elsewhere and not practical to query directly (especially with fields like AttributeMask).

My approach is to rebuild the audit experience via a custom API + PCF, while enforcing field-level security dynamically (masking values when needed).

I’m using MongoDB mainly for scalability and cost (large/long-term audit storage), but the same pattern can absolutely work with Dataverse only — Mongo is just an optimization layer, not a requirement