Skip to main content
Who changed that policy? Who viewed sensitive sessions? The audit log is a security ledger with 365-day retention that records admin actions and sensitive access, such as viewing model analysis results, encrypted session access, gateway model tests, provider syncs, and billing changes.

Investigate and export events

1

Set the date range

Pick the period you want to review, for example 15 Sep – 16 Oct 2026.
2

Filter the table

Filter by category, outcome, actor ID, or target type. Choose the Policy category to isolate policy changes.
3

Open an event

Click any event to open its detail drawer: outcome, timestamp, identity, target, metadata, and request context.
4

Export to CSV

Click Export CSV to download the filtered events for your security review.
Audit security ledger with 365-day retention, date, category, outcome, actor and target type filters, Export CSV button and event table with actors blurred
Audit event detail drawer for Signal settings changed showing outcome, timestamp, identity, target, metadata and request context
Audit log filtered to the Policy category showing one matching event

FAQ

365 days.
Yes. For example, viewing model analysis results is recorded as its own sensitive-access event, as is encrypted session access.
Yes. Apply filters and click Export CSV.