Activity audit log
LiveImmutable record of every action across the workspace.
- ✓Every action captured — uploads, edits, shares, AI runs, permission changes
- ✓Tamper-evident (append-only)
- ✓Filterable by user, date, type
- ✓CSV export
What it is.
Every action — uploads, edits, shares, downloads, AI runs, permission changes — is recorded in a tamper-evident log. Exportable to CSV for compliance audits and SOC 2 evidence.
Logs are workspace-scoped and admin-visible. Members see their own activity but not others'.
Three steps.
End to end.
Any user action is logged with user, timestamp, IP, and action type.
Admin → Audit. Filter by user, date, action type, or document.
CSV export for SOC 2, internal audit, or regulatory request.
What you get.
- ✓Every action captured — uploads, edits, shares, AI runs, permission changes
- ✓Tamper-evident (append-only)
- ✓Filterable by user, date, type
- ✓CSV export
- ✓Retention 12-36 months depending on action type
Quick answers.
Enterprise plans support outbound webhooks for audit events — wire into Splunk, Datadog, or any HTTP endpoint.
More in Team & Enterprise.
One organisation, multiple workspaces with isolated data.
Admin / Member / Guest with workspace-scoped and folder-scoped overrides.
Comment threads, @mentions, and review assignment inside any document.
Group contracts, court research, and compliance items by matter.