Audit Logs

The Audit Logs page is the source of truth for what happened, who did it, and when. Every notable action across the product is captured here.

For the full reference of every event type, the structure of a log entry, and the entities events apply to, see Audit Log Events.

What's logged

A non-exhaustive list:

• Chats — Created, message sent, regenerated, archived, renamed, deleted, exported, pinned, branched.
• Users — Signed in, signed out, profile updated, password changed, 2FA enabled or disabled, integrations connected or disconnected.
• Org — Settings updated, member invited, role changed, security settings changed, audit log exported.
• Vault — File uploaded, shared, trashed, restored, deleted, moved.
• Meetings — Created, shared, deleted.
• Presentations — Generated, regenerated, exported, slides updated.
• Smart Forms — Created, filled, submitted, deleted.

Columns

Each row shows:

• Time — Relative time (5m ago) and the exact timestamp on hover.
• Actor — The user who performed the action.
• Action — Human-readable label (Invited a member, Updated org settings, Archived a chat).
• Entity — A type badge (chat, user, org, file, meeting, presentation, smart_form) and the entity name when relevant.

Expanding a row

Click any row for details:

• Before / after — What changed. Shown in a readable JSON view.
• Context — Request ID, IP address, user agent, session ID.

This is what you need when investigating a specific incident.

Filters and search

• Date range — Start and end dates.
• Search — Full-text over the action labels and entity names.
• Sort — Click the time header to flip the order.

The list paginates as you scroll; older entries load automatically.

Exporting

Click Export to generate a CSV of the currently filtered results. The export runs in the background and you'll receive an email with a download link when it's ready. Download links expire after a set period — usually 7 days.

The export is also written into the audit log itself (you can see Audit log exported events in the same view).

Retention

Audit log entries are retained for as long as your workspace exists, subject to your data retention policy. Contact support if you need a copy after closing your workspace.

See also

• Data Export — for downloading broader activity beyond audit entries.
• Governance — for aggregate analytics instead of per-action history.