The audit log and CSV export

The Audit Log is the tamper-resistant, complete record of all policy-relevant actions in your organization — every detected AI interaction and how the policy engine handled it.

What lands in the log

Each event carries: time, user, the AI app, the action in plain language (prompt submitted, text pasted, file uploaded, text copied, link shared, AI app visited, and more), the outcome (allowed, warned, blocked), a severity, and the platform (web, desktop, mobile). Columns are toggleable, so reviews see exactly what they need.

Selecting a row opens a detail view with the event's metadata — useful when a specific block needs explaining.

Remember what is not in the log by design: prompt contents and sensitive values never leave the device — events carry category labels only.

Filtering

Combine free-text search (action or AI app) with the outcome filter, the severity filter, and an event date range. That is usually all it takes to answer "what did the engine block last week, and for whom?"

Export as CSV

Export CSV exports the current filtered view — the format auditors and GRC tooling actually want. Large reviews work well as a filter-first-then-export loop.

Retention

How far back the log reaches is plan-based — 90 days on Starter, 365 on Business, 730 on Enterprise, extendable as an add-on. Details in privacy and data handling.

Note: the Auditor role was made for exactly this page — read access plus exports, no ability to change anything. See roles and permissions.