Skip to content

Audit log

Who did the sensitive things, and when.

The audit log records the operations that change who can do what, what readers see, and what you pay.

The audit log is a Business capability. See Plans.

The actor, the action, the target, the time, and the metadata relevant to that action. A publish entry links to the exact diff.

Workspace

workspace.rename, workspace.delete, workspace.restore, workspace.two_factor_required, workspace.two_factor_optional

People

invitation.create, invitation.revoke, member.remove, project_role.set, project_role.clear

Projects

project.create, project.delete, theme.set

Readers

domain.set, domain.verify, site_access.workspace_only, analytics.retention

Content and assets

asset.remove, api_spec.set, api_spec.clear

Ask and AI

ask.enabled, ask.disabled, ask_log.enabled, ask_log.disabled, ai_cap.set

Integrations

webhook.create, webhook.remove, webhook.test

Review

review.request, review.comment

Billing

plan.upgraded, plan.downgraded, payment.failed, payment.recovered

Token minting and revocation are recorded too.

domain.set, site_access.workspace_only, theme.set and analytics.retention are in the list because each one changes what a reader gets, and a trail that is silent about those is a trail that cannot answer the question somebody will actually ask.

QuestionWhere to look
What did this page say in June?History
Who changed the domain?Audit log
Who invited that contractor?Audit log
Who published this, and what changed?Both. The publish entry links to the diff.

Repeating an operation that changes nothing does not add a row. A screen that saves the same theme twice produces one entry, so the log stays readable.

Audit entries follow your workspace retention setting. An Enterprise agreement can set a period you choose.

The log exports with the rest of your workspace. See Export.