Audit Trail
The audit trail answers “who did what, when — and what changed?” Every sensitive operation writes an entry with the user (name, email), the entity and record touched, the action, old vs. new values with the changed fields, the source, and technical context like IP address.
What gets audited
- Record changes on sensitive entities — create, update, delete, with before/after values and an optional change reason.
- High-risk actions — approve, reject, export, view of sensitive data, plus login/logout.
- Permission and configuration changes — role and access changes are logged so you can trace who widened (or revoked) access.
- AI agent actions — when an agent writes data (via the controlled action path), the entry is recorded with source
agent, so machine actions are as traceable as human ones. - Source tagging — each entry records where it came from: UI, API, import, workflow, system, or agent.
Sensitive fields are masked before storage, and entries can be flagged immutable — the trail is built for compliance review, not just debugging.
Where to view it
Open Workflow → Audit Trail in the Automation/Workflow area. You can filter by entity, user, action, and date. See Workflow monitoring for the surrounding monitoring tools.
When you’ll need it
- An invoice amount changed and finance wants to know who edited it.
- Compliance or an auditor asks for the approval history of a document.
- You’re investigating a permission change or an unexpected export.