Document access audit trail — who viewed or downloaded each document, with timestamps and IP addresses