Skip to main content

Audit Log

The Audit Log is the workspace-level history of important configuration and integration actions: who did what, and when. Use it for governance (proving that only approved admins changed a sync), security investigations, and troubleshooting (“we thought the model saved—which user saved it last?”).

How it works​

Each entry records an activity type (for example, connection created, model updated, CRM sync rule changed), the user who performed it (name and email when available), a timestamp, and a data payload with structured details about the change. The list is read-only; you cannot edit or delete audit rows from the UI.

Activities cover the lifecycle of major workspace objects: data models, data connections (create, update, delete, authorize, and related actions), CRM sync configurations, enrichments, audiences, dashboards and charts, agents (create/update/delete), LLM providers and LLM configuration, tasks, notes, labels, invitations, workspace settings and resets, MCP clients, reports, and more. When assistants or integrations act on behalf of a user, the entry is still attributed to that user where the platform has user context.

Viewing the workspace audit log​

  1. Open Admin in the main navigation (you need an admin role that includes access to admin settings).
  2. Go to Audit Log.
  3. Choose a time range at the top to narrow the window (for example, last week).
  4. Scan columns Performed on, Activity, Performed by, Email, and Data. The Data column shows JSON with fields relevant to that activity (ids, names, or diffs depending on the event).

If a user was later deactivated, the log can still show their historical actions; deactivated users may be labeled accordingly in the Performed by column.

Other audit-style views​

Some objects—such as a funnel—also expose an Audit tab on their own detail page. That tab is scoped to that object, whereas the workspace Audit Log aggregates events across the whole tenant.