Audit Logs

Track every action in your Workspace for compliance and review

Every action performed in your Workspace is recorded automatically, including role changes, agent edits, content uploads, and deployments. Audit logs give administrators a chronological, filterable record for compliance reviews, security investigations, and change tracking.

Open Workspace > Audit Logs to view the log. Access is limited to the Workspace Admin role.

Role-based access control (workspace, application, and agent-level roles) is covered in the Users & Roles page.

How Audit Logs Works

Audit logs turn raw Workspace activity into a record you can investigate, monitor, and prove. Four capabilities make this possible:

Automatic Recording

Every administrative action in Workspace is captured the moment it happens, with no configuration required

Targeted Investigations

Combine user, category, date, and text filters to surface the exact events you need

Proactive Notifications

Selected administrators receive an email for every recorded event, delivered immediately

Compliance Export

Download the filtered view as a CSV file for archives or auditor requests

What Events Get Tracked

Events are grouped into broad categories by the type of action they represent. Expand any one below to see some example events for each category:

Access Control

User and group management actions that change who can access Workspace or what they can do.

• User logged in or out

• User invited or removed

• Workspace role changed (Viewer / Editor / Admin)

• User group created, modified, or deleted

Content

Changes to agents-related content.

• Workflow created, edited, or removed

Agent Settings

Configuration changes made to an agent in Designer.

• Agent settings updated

• Created or restored a backup for an agent

• Enabled or disabled monitoring for an agent

Agent Deployments

Deployment lifecycle events for agents across channels.

• Deployment created, updated, or deleted

Workspace Settings

Workspace-level configuration changes.

• Login settings updated (SSO, MFA)

• Data retention updated

• Audit log retention changed

Workspace Management

Higher-level Workspace administration actions.

• Agent created or deleted

Searching and Filtering

Searching and filtering scope the log down to the events you care about. You can search for events by their description and filter by category or user. A date range can be layered on top of either to restrict results to a specific time window.

Search

Look up events by a keyword in their Description. Useful when you remember a fragment (an agent name, a file name, an email) but not the user or date.

Filters

Scope the log by Category to isolate one class of activity, or by User name to focus on a single actor. The two filters compose.

Log Retention

Audit log retention controls how far back the log goes, with a maximum of 3 months. Older entries are purged automatically once the window closes. Lowering the retention window does not delete older entries instantly. The purge runs on a schedule, so out-of-window entries may remain visible briefly before they are removed.

This setting applies only to the audit logs. The broader platform data retention is covered in the Data Privacy & Handling page.

Email Notifications

Notifications keep a designated administrator in the loop without requiring them to open Workspace. The selected user receives an email for every audit event, sent immediately as it is recorded.

Only one recipient can be configured at a time. A shared inbox or mail filter is the best fit when more people need visibility.

1

Start a New Subscription

Select Email Notifications in the top-right of the audit log view.

2

Pick the Recipient

Select the user who should receive notifications. Only users with access to Workspace appear in the list.

3

Confirm the Recipient

Close the panel. The recipient starts receiving emails for events recorded from that point onward.

Exporting to CSV

Export the current view as a CSV file for offline analysis, archiving, or sharing with stakeholders who do not have Workspace access. The export respects every filter applied to the log, so you can scope the file to a specific category, user, or date range before downloading.

To export, apply the filters you want and click the Download button.

Each row covers one audit event and contains:

• The columns present in the Audit Logs table

• The exact action performed

• The related deployment, agent, or Workspace ID when applicable

Best Practices

• Match retention to your compliance program: Pick the longest window your policy allows; 3 months suits most organizations

• Tighten Admin access first: Anyone with the Admin role can read the log and change recipients, so audit your Admin roster before treating the log as authoritative

• Export before reducing retention: A shorter window will purge older entries, with no recovery option

• Use category filters for compliance reports: Filter to Access Control or Workspace Settings and export to CSV when preparing evidence for an audit

You now have a full audit trail of Workspace activity, with filters, notifications, and CSV export to support your compliance program.