Audit log

The audit log shows who changed what across your organization. Open the avatar menu and select Audit Log. The page says “Who changed what across your organization”.

You need the audit:read permission. Owners and Administrators have it; Members don’t.

What you see

Each row shows the Time, the Actor who did it, the Action, the Resource it was done to, and its Category. Expand a row for the details.

The kinds of event it holds include:

• sign-ins, successful and failed, and multi-factor changes;
• people invited or removed, and roles assigned or taken away;
• API keys created or revoked;
• access that was refused;
• guardrail and policy changes;
• settings changes, data exports and deletions;
• reads of your Apps’ people’s records by your Owners and Admins: Data Explorer queries, dashboard SQL over Platform databases, and reads through the data API. They record who, which tables or collection, and how many rows, never the records themselves;
• agents, and resources created, changed or deleted.

Automation runs, tasks and triggers are left out of the audit log. They are in the Activity Log (below) and in Logs.

Filter it

• Search activity… finds text in the entries.
• Pick a start and end date.
• Choose a category: All Audit Events, Access, Security, Configuration, Agents or Connections.

Export it

Select Export, then Export as JSON or Export as CSV. The file is named audit-log-<date>.

Export saves only the rows on screen

The export contains the entries currently loaded on the page, 20 at a time, not the whole log. Narrow the dates or category first, and page through if you need more.

Activity Log

Activity Log in the avatar menu is the wider view: “View and export your account activity history”. It includes automations, tasks, triggers, connections, AI and guardrail events, security, data and system events. Its categories are All Categories, Workflows, Tasks, Connections, Triggers, AI / Guardrails, Security, Data and System. It exports the same way.

The full Designer view also has Team Activity, which shows each member’s actions and API calls.

How long entries are kept

Audit entries are kept for 365 days while your account is live. After that a daily clean-up soft-deletes them, so they no longer appear in the audit log. They’re erased with your organization when it’s deleted.