Audit log

Audit Logs in the sidebar opens the institution’s governance ledger: an append-only record of security events, administration changes, data access and AI actions.

Before you start

• You need the view audit permission. Only Admin holds it by default.
• Exporting also needs export data.

Summary tiles

• Total Events (24h)
• Security Flags, which filters the list when selected
• Admin Actions
• Compliance Score, a heuristic: the share of recent events that are not Critical

Filter and search

• Quick filters: All, Critical, Security.
• The Filter popover: Date range (last 7, 30 or 90 days, all time, or custom; default 30 days), Log type (Security, AI, Data, Admin) and Severity (Info, Warning, Critical).
• Search matches the action, target, user and details.

Select a row to open its detail panel; Copy JSON copies the full record.

Export

Export CSV produces a file honouring the current filters, up to 50,000 rows.

What is recorded

Among other events: every sign-in and failed sign-in; session timeouts and sign-outs; role and permission changes; SCIM provisioning; changes to the sign-in, session, data and contact policies; sends and overrides of the contact policy; unmasking of personal data; erasure requests; and assistant actions and their approvals.

The audit log is never purged and is not affected by the retention windows in Data policy.