The Audit Log
Every device change, recorded permanently: who, what, when — built for ISO-style audit requirements.
The Audit Log (in your sidebar) is a permanent record of every change made to your devices, designed for organisations with formal audit or ISO-style compliance requirements.
What gets recorded
| Event | Captured details |
|---|---|
| Device registered | Who, when, the device's name, serial and model |
| Device updated | Who, when, and the exact change — old and new values |
| Device deleted | Who and when |
| Webhook URL viewed | Who accessed the device credential, and when |
Each entry carries the actor's email, a timestamp, and the affected device.
Why you can trust it
- It cannot be edited or deleted — by anyone, including us through normal operations. Entries are write-once at the database level.
- It cannot be bypassed — device changes are recorded in the same database transaction as the change itself. A change that isn't audited cannot happen.
- Credential access fails closed — if the audit record can't be written, the webhook URL is not revealed.
- Identity survives — the actor's email is snapshotted at event time, so the trail stays meaningful even if that person's account is later removed.
Who can see it
Owners (members with device-management permission). Other members see a notice instead of the log.
Retention
Audit entries are kept indefinitely — they are not subject to your plan's analytics data retention window.