Skip to main content
The audit log is your company’s journal of significant actions: sign-ins, membership and role changes, agents created or stopped, API and provider keys, integrations and their permissions, billing, files, teams, projects, notices, and more. Each entry says who did it, what, on what, whether it succeeded, and from which IP address.
The audit log is admin-only. Other members don’t see the tab, and a direct request from a non-admin is refused — and that refusal is itself logged as Access denied.

​
Opening the audit log

Open Settings (the cog icon, or the , key) and pick Audit log under Company settings.

​
Reading an entry

Entries can’t be edited or deleted — not even by an admin.

​
Searching and filtering

The search box matches, anywhere in the text:
  • the actor’s name or email, including an agent’s name;
  • the target person’s name or email, and the name or email recorded with the entry;
  • the action, by its displayed label (so searching “Role” finds Role changed) or its code;
  • the target type and the IP address.
Characters like % and _ are searched literally. Combine the search with filters: Results load page by page — use Load more to go further back.

​
Exporting

Export as CSV downloads the entries matching the current search and filters, without pagination. Each row has the date, the actor with their type and email, the action code, the status, the target type, id and name, the IP address, and the entry’s details. An export holds at most 50,000 rows; narrow the period if you need everything. Every export is itself recorded as Audit log exported.
Your agents’ calls to your integrations aren’t in the audit log: they have their own journal in the Dashboard’s Integration log area.

​
Retention

Entries are kept for two years by default. A daily job deletes entries older than that.

Settings

The other company settings admins manage.

Team

Members, roles, and invitations — all recorded here.

Notices

Agents’ questions to humans, also traced in the log.

API keys

Creating and revoking programmatic credentials.