What is recorded, who can see it, and exporting it for an examiner.
The audit log is the record of everything done in your workspace and by whom: who opened which client's documents, who changed a form, who sent, deleted or exported something. Nobody can edit or delete it, so it's the record to hand an examiner or to consult when a client asks who has seen their information.
In the sidebar, open Audit log. The newest entries come first. Each row shows what was done, who did it, when, and what it was about. Under what was done, it says what changed and why, such as a document going from in review to rejected and the note you gave. Click an entry to see everything recorded about it, including what changed.
To see one client's history, open their page in Clients and choose the Activity tab. Click Open in the full audit log to see the same entries on the full page, with the export.
Wherever the log is shown in part — Recent activity on a client's Overview, the dashboard, a form's This form record, a request's The record — what an entry names leads to it, as it does here, while it still exists and has a page of its own.
The log covers the ordinary work of the firm and the decisions made along the way. That includes:
Entries are append-only. The database itself refuses to change or delete them, not just the application.
Most entries are routine: someone viewing a record, a sign-in, a client reopening their form. So the page shows changes and decisions first. To include the rest, turn on Show views and sign-ins. Routine entries are always kept and always included in the export.
To narrow the list:
Each filter appears as a chip above the list. Click a chip to remove it, or Clear all to remove them all. The category you are on stays.
The page opens on the last 90 days, and says so in a chip. Remove that chip to read the whole log, or press Show all time when nothing in those days matches. Nothing older is deleted; it is only left off the first view.
The CSV holds the days the page shows, so remove the date chip first to export the whole log. It includes routine entries that the page hides by default. Keep it with your firm's records, or share it with your examiner or compliance officer.
Your audit log lasts as long as the records it describes, under the retention window you set. If a client is erased, the log keeps the entries it already has and records the erasure without naming them again. See Retention.
Seeing the audit log is limited to owners and admins by default. A firm can also give it to a custom role. Exporting it also needs permission to export client data.
Members can't open the log. They still appear in it, though: what they do is recorded like everyone else's. To change who can see it, see Inviting your team.
Engineers who maintain the systems beneath Cartenda are bound by confidentiality and by the access limits in our Data Processing Addendum. Access at that level isn't written to your firm's log. Opening a client's document through the application is always logged, whoever does it.
Still stuck? Write to hello@cartenda.com and a person will answer.