Administration
Audit Log
Who changed what in your organization
Every administrative action is recorded in an append-only audit log per organization: who did it, from where, what changed, and when. Entries are immutable and kept for as long as the organization exists.
What is recorded
| Area | Actions |
|---|---|
| Projects | created, updated, deleted, selected, key rotated, secret rotated |
| Members | registered, invited, role changed, disabled, enabled |
| Accounts | password changed, password reset, email verified |
| Privacy | subject exported, subject erased |
| Accounts service | signup, login, organization switch, invitations, API token created/rotated/revoked |
Each entry carries the actor, the action, the target type and id, the client IP and a small metadata map (for example the new role).
Reading it
- Dashboard: Settings → Audit log lists the organization's entries newest first (owners and admins).
- API:
GET /v1/audit?limit=100with an admin session returns the same entries as JSON.
curl "https://api.iforevents.com/v1/audit?limit=50" -H "Authorization: Bearer <session token>"Retention and export
Audit entries are not subject to the event retention window. Export them through the API if your compliance process needs an offline copy.