Audit log

/dashboard/audit shows every action your team has taken on your account. Immutable; useful for compliance, incident review, and seeing who changed what when.

What gets logged

• Sign-ins (successful and failed)
• API key issued / revoked
• Form created / edited / deleted
• Rule created / edited / deleted
• Team member invited / role-changed / removed
• Webhook created / toggled / deleted / tested
• Verdict overrides (when an admin flips a verdict)
• Settings changes (password, email)

What's recorded

For each entry: timestamp (UTC), actor user, action code, target (e.g. webhook #42), originating IP address, and a JSON detail object with action-specific context. We never log credentials — password changes record only that a change happened, not the values.

Filtering

Filter by action type (dropdown lists every action you've taken) and period (1/7/30/90 days). Combine to find e.g. "all webhook changes in the last week".

Retention

Audit entries are kept for at least 13 months. Reach out if you need export of older data for compliance.