Audit log

A searchable timeline of every meaningful action taken in your organisation.

Every meaningful action in your organisation, creating a client, sending an invoice, adding a member, changing a permission, is recorded in the audit log. Use it to answer "who did what, when?".

Where it lives

Dashboard → Audit Log.

What you see

The page opens with View Audit Log, but it does not show you everything. You see the entries in the areas your other permissions cover, plus everything you did yourself. A line under the title says so ("You see activity in the areas your permissions cover, and everything you did yourself."), and an empty log reads "No activity you can see yet."

Entries aboutYou see them with
Invoices, quotes, payments, expensesThe matching View All or Manage permission (quotes also cover recurring quote schedules)
Bank accounts and statementsView Accounts or Modify Accounts
Billing and subscriptionManage Billing
Clients, projects, tasks, teams, leadsThe matching View All or Manage permission for that area (task types: Create Tasks or Manage Tasks)
ContactsView All Contacts
WorkflowsTemplates: Projects, View All Projects, Manage Projects or Manage Workflows; runs: View All Projects or Manage Projects
HiringView or Manage Job Applications (job posts also Manage Job Posts)
InventoryInventory
Short linksView Short URLs
Members, roles, usersManage Members (roles: Manage Roles too)
API keysDeveloper Access
Organisation settings, WhatsApp and email configuration, the document header, Nova providersManage Organisation (WhatsApp chat templates also with Manage custom WhatsApp chat templates)
Partner organisationsView or Manage Partner
Organisation passwordsA permission that sees all organisation passwords
Chat messages in teams, projects and tasksView All Chats
Direct message edits and deletionsOwners only
Personal passwords and your calendar meetingsOnly the person who made them

Owners see every entry. Your own actions are always visible to you. The acting colleague's email address shows only if you are allowed to see the member directory; otherwise you see their name. Paging and the entry count follow the same rule, so a page is never short because entries were hidden.

You'll see a reverse-chronological list of entries. Each entry shows:

  • Actor, the team member who performed the action (with their avatar). If they have since left the organisation, the entry stays and keeps their name.
  • Action, a coloured badge like task.create, invoice.update, member.invite, api_key.delete. Colour codes by verb:
    • Green for create
    • Blue for update / assign / share
    • Red for delete / revoke / cancel
  • Entity, what was acted on (e.g. Invoice INV-0042). If the entity was deleted, the name shows struck-through. A chat message's entry names the channel it was in (e.g. Message in Team: Design).
  • Timestamp, local time.

Inspecting an entry

Click a row to expand it. You'll see one of:

  • Changes, for update actions, a side-by-side diff of every field that changed (old value in red, new value in green).
  • Snapshot, for delete actions, a snapshot of the record's final field values just before deletion. A deleted chat message shows its text, its files, its sender and when it was sent, and below it the transcript of any voice message or audio or video file it had. A deleted poll also shows its question, each option with its number of votes, and whether it took one answer or several; the entry also records who voted for each option.

For create and most state-change actions there's no diff, the action itself is the story.

Filtering

The toolbar at the top has:

  • Search, case-insensitive match across action name, actor name, and entity name. Type to filter live.
  • Entity type, narrow the log to a single record type (Tasks, Invoices, Members, Roles, etc.). Around 21 categories.

Pagination is "Load more" at the bottom, 50 entries per page. The filter offers only the types of entry you are allowed to see.

What gets logged

Most state-changing actions are logged. A non-exhaustive list:

  • CRM, clients, projects, leads, contacts, files
  • Finance, invoices, quotes, payments, payment accounts, expenses
  • Tasks & submissions, task create/update/delete, submissions, approval / revision-request
  • Team, members, role changes, invitations, removals
  • Org, settings updates, branding changes, domain verification
  • Security, API key create/revoke/delete, share grants, sign-in related actions
  • Chat, message edits (with the text before the edit) and deletions (with a copy of the deleted message, its sender, when it was sent, and its files, or a deleted poll's question, options and votes). Votes in a poll are not logged

Read-only actions (viewing a list, reading a record) are not logged.

Permissions you'll need

You need View Audit Log to see this page. By default it's bundled with Owners, Admins and Managers. Even then, what each person sees depends on their other permissions (see What you see above). The log still keeps the text of edited and deleted chat messages; it shows it only to people who may read that chat (View All Chats), or, for direct messages, to Owners.

Need to export it?

The current page is paginated only. For large exports, use the audit resource of the API (documented in the Developer API Reference, visible in the docs sidebar with the Developer Access permission) or contact support.