Audit log
Who did what in the organization, from where and when, including what was refused. What is recorded, what your plan lets you read, and how to export it.
Availability: Available on Pro, Business and Enterprise, and during the 14-day trial. Every plan records it; Enterprise also reads Records, Settings, and Workflows & agents. Compare plans
On this page
The audit log answers who did what in the organization, from where and when, including what someone tried and was not allowed. It is in Settings > Members & access > Audit log.
Owners and Admins read it, and any custom role given the audit right, which can hold it without seeing a single record: a role for compliance. Only a person reads the log.
What is recorded#
- Every act that changes something, from any door: the screen, the Agent, a workflow or an API key.
- Refused attempts: "tried to delete", with the reason.
- Acts held for approval: "asked to confirm".
- Every export, and every link to a stored file, although both only read.
- Reads of sensitive values: a record read that showed the value of a Sensitive or Highly sensitive property, naming the properties, never the values.
- Sign-ins and account events: signing in and out, failed and throttled sign-ins, accepted invitations, password changes and resets, second factors set up or removed, the Agent's autonomy changed or AI switched on or off, and more.
Each row is a sentence, such as "Dana signed in" or "Dana exported contacts", with who did it, on behalf of whom, from which surface, address and device. A row never holds a field's value: the change itself is in the record's own history, where field access still applies.
Not recorded: other reads, dry runs, validation errors, and what the platform takes in on its own, such as synced mail and web form submissions.
Rows cannot be edited or deleted: the database refuses it, apart from removing a person's data when that person is erased. The log is kept for 24 months by default.
What you can read#
Every act is recorded on every plan; the plan decides how far back, and which groups, you can read:
| Group | Paid plans and the 14-day trial | Enterprise |
|---|---|---|
| Sign-ins | 30 days on screen, 90 in an export | 30 days on screen, 90 in an export |
| Security | 30 days on screen, 365 in an export | 30 days on screen, 365 in an export |
| Content, Object types | 30 days | 30 days |
| Records, Settings, Workflows & agents | Recorded, not readable | 30 days |
An organization on the free plan cannot read the log. The page names the groups your plan does not open: "Nothing is lost in the meantime."
Note: Changes to roles, invitations, deactivations, sharing, field access and approval rules, every export and every read of a sensitive value are in Security. Record changes and deletions, approval decisions, and workflow and Agent settings changes are in Records, Settings and Workflows & agents.
Read and export#
- The views All, Sign-ins, Security, Exports, Deletions and Refused, with Filters by Category, Who (a person, an API key, an agent, a workflow, the platform or SalexHub staff) and Outcome, and Search acts over what is loaded.
- A row opens its Details: the action, category, outcome, who, on behalf of whom, the target, surface, address, device and request id, and a link to the record.
- Export writes a CSV of the selected view, within your plan's export window, up to 100,000 acts. It asks you to confirm it is you when you have not in the last two hours.