Activity log (who did what)

The activity log records who did what and when in your organization: creating, changing and deleting members, payments, settings and more. It's your timeline for accountability and for tracing what happened.

This page requires the View logs permission (view_logs).

Where to find it

Sidebar → Organization management → Activity log.

What you see at the top

Three key-figure tiles: Today, Last 7 days and Security events (7d).

Filtering

1. Severity — all, Info, Important or Security.
2. Search — by action (free text).
3. Category — for example members, payments or settings.
4. Date from / to — limit to a period.

Step by step: finding an event

1. Set the filters (for example category "payments" and the right dates).
2. Click a row to open the detail dialog.
3. Review the details: timestamp, who did it, the object, the source, the IP address and any changed fields (old and new value).

Retention

How long a row is kept depends on its severity:

• Info — 18 months.
• Important — 24 months.
• Security (logins, deletions, viewing PII, role and permission changes, exports) — indefinitely.

Exporting

Use Export CSV to download the filtered list as a CSV file, handy for an audit or archive.

Tips

• Use the Security severity filter to quickly find sensitive actions (logins, deletions, permission changes).
• Open a row: the detail dialog shows exactly which field went from which old value to which new value.

Frequently asked questions

Is this different from the platform audit log? Yes. The activity log belongs to your organization and has retention periods; the platform audit log is for super admins and keeps compliance data separately.

Are names readable in the log? Names are stored securely (encrypted) and only decrypted when shown; raw personal data does not end up in the details.

Can I delete a row? You can only delete your own log rows; other people's rows stay.

Troubleshooting

• Why don't I see this page? The activity log requires the View logs permission (view_logs). Without it the menu item doesn't appear — ask a lead admin.
• I can't find an action. Widen the dates and clear other filters; also check you're in the right organization.
• An old event has disappeared. Its severity's retention (Info/Important) may have expired; security events stay indefinitely.

Related

• Administrators & permissions — who can do what (permissions explain many log rows).
• Notifications — alerts about events that need action now.