Audit log
The organization-wide change log: every create, change and delete, every sign-in (including refused ones), sign-out and downloaded file, with who did it, when, from where and what changed.
Audit log
The audit log is the permanent record of what happened in your organization: every record created, changed or deleted, every sign-in and sign-out (including refused sign-ins), and every file downloaded. Use it when a price, a payment, a permission or a sign-in is questioned and you need to know who did what, and when.
Where to find it
Open the account menu in the top bar, choose Settings (see Settings), then the Audit log tab. Open in the audit log at the foot of a record's History panel also brings you here, already filtered to that record (or, for a project, to everything in the project).
You need the View permission on Audit Trail. Without it the page shows "No access" and "You do not have permission to view the audit log. Ask your administrator." In the default roles only the Administrator, the Compliance Officer and the Auditor hold it, because the log shows every user's activity.
What you see
The heading reads Audit log with the line "Who changed what, and when: every create, change and delete, sign-ins (including refused ones), sign-outs and downloaded files. Entries cannot be edited or removed." and a Refresh button.
Above the grid, the filters. Each narrows the list; they combine.
| Filter | Choices |
|---|---|
| Any project | One of your projects: entries that belong to it (its towers, units, offers, sales, money and so on). Shown if you have the View permission on Projects and at least one project exists. |
| Any component | A group of record kinds: Structure, Parking, Pricing, Construction stages, Society & offers, Sales, Money, Documents & downloads, Project settings or Organization-wide. |
| Any record | One record kind (Booking, Contact, Role, Unit and so on). |
| Any action | Create, Update, Delete, Sign In, Sign In Failed, Sign Out or Download. |
| Anyone | Who acted: User, AI Connector, Workflow or System. |
| Any user | One person, by name. Shown if you have the View permission on Users; lists the first 200 users. |
| From date / To date | A date range, in your organization's time zone. |
| Search | "Search user email or record kind": matches the actor's email or the record kind's internal name. |
When you arrive from a record's History, a blue chip "<Record kind> · <id> and its lines" shows the record filter; clicking Everything saved with it in an entry adds a purple chip "One request · <id>". Each chip has a cross to clear it.
The grid columns:
| Column | What it shows |
|---|---|
| When | Date and time. |
| Who | The person's name; "<name> via AI connector" when an assistant acted for them; "Workflow (as <name>)" for an automatic rule; "System" (or "System (as <name>)" when the app acted for someone). The network address is underneath. |
| Action | A coloured badge: Create, Update, Delete, Sign In, Sign In Failed, Sign Out or Download. |
| Record | "<Kind> · <name>", linked when the record has a page; "of <parent>" underneath for a line of a record (an applicant, an item, a permission), and "in <project>" when it belongs to a project. |
| What | A one-line summary: "Created", "Deleted", "Changed <fields>" (the first four fields, then "and N more"), "Signed in (<method>)", "Sign-in refused (<reason>)", "Signed out" or "Downloaded <file>". |
| (eye icon) | Opens the entry. |
Entries are listed newest first. You can sort by When, Who, Action and Record (not What). When nothing matches the grid reads "No entries match".
The entry panel
Opening an entry shows the Audit entry panel on the right: the action badge and summary, then When, Who (with their email), Record, Project (when it belongs to one), Part of (the parent record for a line), IP address, Browser and Request with the link Everything saved with it. Sign-in and download entries list their details (the sign-in method or the refusal reason, the file name). Changes show as a table of Field, Before and After; for a create or delete the table has one Value (or Value when deleted) column. Passwords, two-factor secrets and backup codes show as "[redacted]". If the entry cannot be fetched the panel says "This entry could not be loaded."
What you can do
Refresh
Reloads the list with the current filters. Use it to see activity that happened since you opened the page.
- Who: anyone who can see the log.
Open
The eye icon on a row (tooltip "Open") opens the entry panel described above. The entry is part of the page address, so you can copy the link to share a particular entry with another auditor.
- Who: anyone who can see the log.
Everything saved with it
In the entry panel, filters the log to every entry written by the same request: one save often touches several records (a booking and its applicants, a role and its permissions, a voucher and its lines), and this shows them together.
- Who: anyone who can see the log.
Record links
Clicking a record name in the Record column, or in the panel, opens that record's page when it has one.
Statuses
The log has no statuses of its own. The Action badges mean:
| Action | Meaning |
|---|---|
| Create | A record or line was added. |
| Update | Fields changed; the entry lists them with before and after values. |
| Delete | A record or line was removed; the entry keeps its last values. |
| Sign In | A successful sign-in, with the method. Accepting an invitation is recorded as a sign-in. |
| Sign In Failed | A refused sign-in, with the reason. |
| Sign Out | A sign-out. |
| Download | A file was downloaded (an Excel sheet, a document, an attachment), with the file name. |
Things to know
- Nothing in the log can be edited or removed. It is append-only, so it can be relied on when a figure or a permission is disputed.
- Recording started on 28 Sep 2026. Earlier changes are not in the log.
- Almost everything is recorded, with a few sensible exceptions. Housekeeping such as notifications, workflow run bookkeeping, campaign recipients and the log itself is left out, and a record's "last sign-in" or a workflow rule's "last run" stamp does not create an entry.
- Secrets are never stored. Passwords, two-factor secrets, backup codes and similar values are written as "[redacted]"; very long values are cut short.
- Who did it, in four flavours. User is a person on the web; AI Connector is a person acting through a connected assistant (see AI connectors); Workflow is an automatic rule acting on someone's behalf; System is the app itself.
- A record's own History is the friendlier view. Every record page with a History button shows the same entries for that record and its lines without needing Audit Trail: the View permission on the record's module is enough. See History panel.
- Search matches the record kind's internal name, which can differ from the label shown (an offer's internal name is "termsheet", a booking applicant's is "booking_party"). Use the Any record filter when the search doesn't find what you expect.
- The user filter lists at most 200 people. In a very large organization, search by email instead.
- Your organization can rename the grid's column titles, so your screen may use different words.
Related
Related
- SettingsScreen
The Settings area of the app: a row of tabs for your organization's profile and policies, products, users, roles, lookups, workflows, documents, AI connectors and the audit log.
- History panelScreen
See who changed a record, what they changed and when, including the record's lines, newest first, and jump to the full audit log.
- Roles & PermissionsScreen
The list of your organization's roles: open one, create or clone a role, deactivate or reactivate it, and delete custom roles nobody holds.
- UsersScreen
The people in your organization: invite new users, change their role, deactivate or reactivate them, reset a lost two-factor authentication, and resend or revoke pending invitations.
- AI connectorsScreen
Connect Claude, ChatGPT or another AI assistant to NirmaanOne so it can act as you, see what your connections have done, and disconnect them; administrators see and revoke everyone's.
- Project overviewScreen
A project's home page: its details, site, land, RERA registration, inventory summary, whether it is ready to sell and collect, where its money stands across its RERA accounts, and the setup checklist.
- Audit trail and record historyConcept
What an audit entry records (who changed what, when, from where, with before and after values), how entries group into a record's history and a project's history, and who may read them.
- Find out who changed somethingHow-to
Open a record's History to see who changed it, when and what the values were before and after, then follow it into the Audit log to narrow by person, action or date and see everything saved in the same request.