Abstract: A validating service of a plurality of services that compose an application receives a security token that identifies an entity that has submitted a transaction to the application, the security token indicating that the entity is authorized to submit the transaction to the application. The validating service obtains a transaction identifier that uniquely identifies the transaction. The validating service sends, to a collector service, the transaction identifier and data derived from the security token that identifies the entity. A downstream service receives input data associated with the transaction, the input data including the transaction identifier. The downstream service accesses an information source to obtain information. The downstream service sends, to the collector service, the transaction identifier and metadata about the information.