# Audit log

> Read, filter, search and export your institution's Unifuse audit log, which records sign-ins, administration changes, data access and assistant actions and is never purged.

Source: https://docs.unifuse.ai/administration/audit-log/

**Audit Logs** in the sidebar opens the institution's governance ledger: an append-only record
of security events, administration changes, data access and AI actions.

## Before you start

- You need the *view audit* permission. Only Admin holds it by default.
- Exporting also needs *export data*.

## Summary tiles

- **Total Events (24h)**
- **Security Flags**, which filters the list when selected
- **Admin Actions**
- **Compliance Score**, a heuristic: the share of recent events that are not Critical

## Filter and search

- Quick filters: **All**, **Critical**, **Security**.
- The **Filter** popover: **Date range** (last 7, 30 or 90 days, all time, or custom; default
  30 days), **Log type** (Security, AI, Data, Admin) and **Severity** (Info, Warning, Critical).
- **Search** matches the action, target, user and details.

Select a row to open its detail panel; **Copy JSON** copies the full record.

## Export

**Export CSV** produces a file honouring the current filters, up to 50,000 rows.

## What is recorded

Among other events: every sign-in and failed sign-in; session timeouts and sign-outs; role and
permission changes; SCIM provisioning; changes to the sign-in, session, data and contact
policies; sends and overrides of the contact policy; unmasking of personal data; erasure
requests; and assistant actions and their approvals.

The audit log is never purged and is not affected by the retention windows in
[Data policy](/administration/data-policy/).
