Activity and audit log
The audit log is a comprehensive record of every significant action in your workspace. You access it from the Reports page.
#Who can access the log
Any user with the View Logs permission (VIEW_LOGS) can access the audit log. The same page is available to all roles that hold the permission. There is no separate view for auditors.
#What the audit log records
The log captures events across the following categories:
- Authentication. Login successes and failures, verification challenges, and session events.
- Governance. User creation, updates, and deactivation; role creation and modification; permission grants and revocations.
- Policy. Policy creation and modification, and policy check results (allowed or denied).
- Workflow. Movement requests and their progression through the signing workflow.
- Signing. Signing requests, signature submissions, and threshold completion.
- Bitcoin network. Vault additions, transaction signing, broadcast, and confirmation.
- SCL. Token deployment submissions, state changes, and failures.
- Tenant. Organisation and workspace creation and modification.
- System. Platform-level events such as signing failures and node availability.
- Audit. Audit-log actions, including export requests.
Each entry includes a timestamp, the event category, the specific action, and the user who triggered it where applicable.
#Reading log entries
- Navigate to the Reports page.
- Review entries in chronological order.
- Filter by event category, user, or time range to narrow the view.
#Exporting the log
You can export audit log data as a CSV file for external analysis, regulatory reporting, or archival. Export requires the View Logs permission and covers the current workspace. Use the export option on the Reports page.
The audit log gives compliance and audit staff an evidentiary record of governance, policy, and movement activity. Every movement has a traceable path from initiation through each signature to final broadcast. Policy violations are recorded with the denied action and the rule that triggered the denial.
The audit log is where control meets evidence. Movements, signatures, policy decisions, and governance changes are all recorded in one place and can be exported for review. Use it to demonstrate that your controls operated as intended.