Audit log
Who changed what in your organization, how to export it, and how long it is kept.
The audit log records every administrative change in your organization: who did it, when, to what, and with which details. Every member of the organization can read it under Audit Log in the console. The page shows the newest 100 entries; the export contains more.
What is recorded
| Area | Events |
|---|---|
| Sign-in | user signed in |
| API keys | created, updated, rotated, disabled, enabled, revoked, expiry warning sent |
| Members | invited, invitation cancelled, joined, role changed, removed |
| Teams | created, renamed, deleted, member assigned, key assigned, budget changed, budget alert sent |
| Guardrails | created, updated, deleted |
| Routing policies | created, updated, deleted |
| Organization | created, settings changed, regulated segments changed |
| Billing | top-up completed, auto top-up completed, failed, capped or switched off, low-balance alert sent, credit adjusted, top-up fee changed |
| Consent | analytics or crash-reporting consent changed |
| Audit log | old entries pruned |
Requests to the API are not audit events. They appear in the logs.
Export
Export CSV downloads the audit log, up to 100,000 entries per export, for your own archive or an auditor.
Retention
By default, audit entries are kept indefinitely. Owners and admins can choose a retention period under Settings: unlimited, 60, 90, 180 or 365 days. An hourly job then deletes older entries, except consent changes and the record of the pruning itself, which are kept. Choose the period your own retention obligations require; shortening it deletes the older entries for good.
Deleting the organization deletes its audit log as well.