Audit Log

Track and review all administrative and operational activities across AI for Work.

---

Overview

The Audit Log system records every administrative and user action on the platform, creating a tamper-resistant trail that supports security, compliance, and troubleshooting.

Logs are captured in three locations, each scoped to a different level of the platform:

Location	What it tracks	Who can access
Admin Hub	Platform-wide configuration changes — user management, security settings, assistant config, workspace management	Full admins (all logs); custom admins (modules they manage)
Workspace	Team-level activity — collaborator changes, permission updates, workspace configuration, resource allocation	Workspace administrators
Agent	Agent-level activity — creation, modification, publishing status, integrations	Users with edit access or ownership of the agent

Log Entry Details

Every log entry captures the following fields:

Field	Description
User	Full name and email address of the person who performed the action
Module	The functional area where the activity occurred (e.g., User Management, Security, or a specific agent page)
Activity	A concise description of the action and its impact
Timestamp	Exact date and time of the activity in a consistent format

Filtering

Use the built-in filters to narrow log results for investigation or review.

Filter	Description
Date Range	Limit results to a specific time period
User	Show activity from a specific individual
Module / Sub-module	Focus on a functional area; the filter adapts dynamically based on the current log context

Export

Export filtered logs for compliance reporting, investigations, or record-keeping.

• Click Export to download the current filtered view as a CSV file.
• All data fields and relationships are preserved in the export.

---

System Integrity

The Audit Log system is built with the following guarantees:

Property	Description
Real-time logging	Actions are recorded instantly when performed
Consistent format	Log entries use the same structure across all three locations
Complete coverage	No entries are missing or duplicated
Tamper resistance	All logs are read-only and cannot be modified

Audit Log API

You can also retrieve audit log data programmatically through the Audit Log API. Use the API to feed log data into custom reports, SIEM tools, or compliance workflows. The API supports filters for entity, entity ID, user, email address, time window, and action type.

For the endpoint, parameters, supported entities, and sample requests, see Audit Log API.

---