Audit trail

Roles control what can happen. The audit trail records what did happen — a durable log of actions across your company, kept for accountability and compliance.

What's recorded

Each entry captures the essentials of an action:

Who did it — the actor
Whether it was a person or the AI — every event is tagged human or AI, so the Associate's actions are always distinguishable from a teammate's
What happened — the event and the entity it affected (a task, document, etc.)
Where — the project and workspace
When — the timestamp
Supporting details for context

You can tell humans and AI apart

Because every entry is tagged by actor type, you can filter the log to just the AI's actions — a clear, reviewable record of everything the Associate has done on your behalf. That's a big part of trusting an AI that can act.

Tamper-evident by design

The audit trail is append-only and tamper-evident: each entry is cryptographically chained to the one before it. If a record were altered or removed, the chain would no longer line up — so the log can be trusted as an accurate history, which is exactly what compliance frameworks like SOC 2 expect.

Who can see it

The audit trail is admin-only — restricted to owners, admins, and managers. Day-to-day members and read-only roles don't have access to it.

Filtering and export

Admins can filter the log — by event type, by a specific person, or by human vs AI — and export it to CSV for record-keeping or to hand to an auditor.

Last updated: 2026-05-31