Audit log
The audit log records every significant action: sign-ins, governance changes, policy decisions, signatures, broadcasts, asset deployments, enforcement actions and attestations. You review it on the Reports page and export it as CSV.
Required permissions: View logs (VIEW_LOGS).
#What is recorded
| Category | Examples |
|---|---|
| Authentication | Sign-ins and sessions created, revoked and expired |
| Governance | Users invited and removed, roles created, permissions granted and revoked |
| Policy | Limit checks allowed and denied |
| Signing | Proposals created, each signature, threshold reached |
| Bitcoin network | Vaults created, transactions finalised, broadcast and confirmed |
| Smart contract | Asset deployments and calls, and their state changes |
| Enforcement | Freezes, releases, clawbacks and pauses, with reason code and case reference |
| Compliance | Screening cases opened and decided, Travel Rule records |
| Reserves | Attestations received, divergence alerts raised and resolved |
| Organisation | Organisations and workspaces created |
| Audit export | Every export requested, completed or failed |
Each entry has a timestamp, category, action, description, the user and role, and a trace ID.
#Reading the log
- Open Reports. The page is headed Audit Logs.
- Filter by Category and by a From and To date.
The log on screen covers your organisation's workspaces.
#Exporting
Select Export CSV to download the current workspace's log for the date range, up to 100,000 rows. The export lists timestamp, category, action, description, user name, user ID, workspace, role, trace ID and event ID. The export itself is recorded in the log.
Key takeaway
The audit log is where control meets evidence. Every movement has a traceable path from proposal through each signature to broadcast, and every enforcement action carries its reason and case.