Reading the audit log
The audit log is the institution's record of who did what, when, and to which record. It captures sensitive actions across the platform so that an examiner, an internal auditor, or an administrator investigating an incident can reconstruct exactly what happened rather than take anyone's word for it.
What each entry captures
- The actor — the staff account that performed the action.
- The timestamp — when it happened.
- The action and change detail — what was done.
- The record affected — which loan, client, role, or account it touched.
Searching the log
The log is searchable, so you can narrow to a specific actor, a date range, or a particular record when you are investigating. Rather than scrolling a raw event stream, you filter to the question you actually have — for example, every access change made to one staff account, or every sensitive action on one loan.
Retention
Audit entries are retained so history remains available for later review; confirm the exact retention period for your institution against your tenant's configuration and regulatory obligations before relying on a specific figure. The important principle is that the record is preserved — sensitive activity is not silently discarded, and it is never overwritten when a staff member is later offboarded.
Revoking a staff member's access does not erase their history. Their prior actions remain attributed to them in the audit log, which is what makes accountability durable.