← All features
Team & Enterprise

Activity audit log

Live

A searchable, append-only record of state-changing actions across your organisation.

What you get
  • ✓State-changing actions captured — uploads, edits, shares, AI runs, admin changes
  • ✓Append-only, enforced in the database — update is rejected outright and delete only under an explicit purge flag
  • ✓Actor type recorded — user, system, API key, SCIM, or webhook
  • ✓Before and after state captured on the change
+2 more capabilities below
Overview

What it is.

State-changing actions — uploads, edits, shares, AI runs, billing and admin changes — are recorded with the actor, timestamp, IP and before/after state. Exportable to CSV for internal and compliance audits.

Logs are organisation-scoped and admin-visible.

How it works

Three steps.
End to end.

01
1. Action happens

Any user action is logged with user, timestamp, IP, and action type.

02
2. Search + filter

Admin → Audit. Filter by user, date, action type, or document.

03
3. Export

CSV export for internal audit or regulatory request.

Capabilities

What you get.

  • ✓State-changing actions captured — uploads, edits, shares, AI runs, admin changes
  • ✓Append-only, enforced in the database — update is rejected outright and delete only under an explicit purge flag
  • ✓Actor type recorded — user, system, API key, SCIM, or webhook
  • ✓Before and after state captured on the change
  • ✓IP address, user agent and request id on every entry
  • ✓Filterable by action (exact or prefix), by actor, and by date range
FAQ

Quick answers.

Is it really append-only, or just not editable in the UI?

Really. Database triggers reject any update to an audit row, and reject deletes unless the transaction explicitly sets a purge flag. It is not an application convention that a bug could bypass.

How long are entries kept?

The retention position recorded in the product is seven years, in line with IT-enabled-services record-keeping. There is no tiering by action type and no purge job currently running.

Can I export to CSV or forward to my SIEM?

Not today. There is no CSV export on the audit log and no audit event on the outbound webhook set. Read and filter it through the admin surface.

Related

More in Team & Enterprise.

Workspaces
Soon

Not built. The organisation is the isolation boundary; matters are how work is grouped inside it.

Roles & permissions
Live

Four seeded roles with per-capability view / add / edit / delete permissions, plus custom roles you define.

Collaborative editing & edit proposals
Beta

Shared editing sessions on a document, and a propose-review-merge flow for changes to it.

Matter management
Live

Group contracts, research, obligations, meetings and tasks by matter — with a timeline of everything that happened on it.

Want to try Activity audit log?
Get started in 60 seconds.

Sign up →All features
Hi — I’m Vio.