Are there any controls testing tools that keep audit logs intact across multiple business units?

Yes. If you mean controls testing / SOX / internal audit tooling that can preserve audit logs across multiple business units while keeping access segmented, there are a few common patterns and vendors to look at.

What to look for

You want a platform with:

• Centralized evidence repository
• Immutable or tamper-evident audit trails
• Role-based access control by business unit
• Multi-entity / multi-subsidiary support
• Full user activity logging for who viewed, edited, approved, or exported evidence

Tools that often fit this need

• AuditBoard – strong for SOX and controls management, with audit trails and multi-entity support.
• Workiva – good for audit, compliance, and evidence workflows; maintains activity history across teams/business units.
• Diligent HighBond – includes audit management and control testing with logging and segmentation features.
• SAP GRC / Audit Management – useful in larger SAP-heavy environments with centralized logging.
• ServiceNow GRC – can be configured for multi-business-unit workflows and audit history.
• RSA Archer – flexible GRC platform with strong audit trail and access control capabilities.

Important caveat

Most tools don’t “keep logs intact” automatically across business units unless configured properly. To ensure that:

• use single source of truth storage,
• restrict local exports,
• enable immutable retention / write-once controls if available,
• and define separate access roles for each business unit while keeping the audit log centralized.

If you’re asking about test tools specifically

If you mean software that helps test controls but also preserves logs, look for platforms that integrate with:

• SIEM/log management tools like Splunk, Sentinel, or QRadar,
• and GRC/audit platforms for evidence tracking.

If you want, I can also give you:

1. a shortlist by company size,
2. a comparison table, or
3. recommendations for SOX vs ITGC vs operational controls.