Security & Compliance
Audit Log
Available todayApplication-level record of authentication, administration and governance events for authorised organisation administrators.
The Audit Log gives authorised organisation administrators a chronological view of important application events - sign-in successes and failures, MFA and SSO attempts, administrative changes and governance decisions - captured with the acting user, timestamp and outcome. Immutability guarantees, configurable retention, export and SIEM forwarding are not implemented in this release.
Activity History
Review a chronological list of significant actions performed across the platform, scoped to the organisation and filtered by module or department.
User Accountability
Every audit record identifies the authenticated user who performed the action, creating a clear accountability trail for administrators and reviewers.
Change Tracking
Track when strategies, objectives, initiatives, KPIs and configuration values are created or modified, supporting operational and compliance reviews.
Governance Support
Provide evidence for governance reviews, access recertification and internal controls by retaining a central record of important platform activity.
Overview
The Audit Log records significant activity performed within the platform to improve transparency and operational accountability.
Audit records help administrators understand changes made across departmental workspaces, strategies and administration.
How Audit Logging Works
Important platform actions generate audit records automatically. The workflow below shows how an action performed by a user becomes a permanent entry in the audit log.
User Action
A user performs a significant action within the platform, such as updating a strategy or assigning a role.
Permission Validation
The platform verifies that the user has the required permissions to complete the requested action.
Action Completed
The action is executed and the relevant workspace, strategy or configuration record is updated.
Audit Record Created
An audit record is written to the application audit log, capturing the user, timestamp, module and outcome.
Audit Log
The record is appended to the organisation's audit timeline and becomes available for review.
Administrator Review
Authorised administrators and executives review the activity to support governance, investigation and accountability.
Audit records are created without requiring manual intervention. The platform captures significant events as they happen, ensuring the audit log remains current and complete.
Recorded Activities
The audit log captures significant events from across the platform. The categories below describe the activity types administrators can expect to see in the audit timeline.
Strategy Updates
Records the creation, modification and publication of department strategies. Captures who changed the strategy, when the change occurred and the workspace affected.
Objectives & Initiatives
Tracks changes to objectives, initiatives, ownership assignments, timeframes and status updates. Helps departments maintain a clear history of execution decisions.
Governance Activity
Logs approvals, reviews, sign-offs and other governance actions. Supports audit readiness and demonstrates that required oversight steps were completed.
Administration
Captures user administration, organisation updates, department configuration changes, role assignments and other administrative actions performed by platform administrators.
Authentication Events
Records successful authentication activity and sign-in events. Provides visibility into when users accessed the platform without exposing credential or session material.
Failed logins, lockouts and advanced security events are not recorded in the standard audit log unless the corresponding security monitoring features are enabled for the organisation.
Audit Timeline
The timeline below shows a representative view of audit activity for an organisation. Administrators can filter the timeline by user, department, module and date range.
| Time | User | Activity | Area |
|---|---|---|---|
| 09:42 | Sarah Johnson | Updated Marketing Strategy | Marketing |
| 09:18 | David Wilson | Published Q3 Objectives | Sales |
| 08:57 | Emma Patel | Assigned Department Leader | Administration |
| Yesterday | James Brown | Governance Review Completed | Finance |
| Yesterday | Olivia Smith | Updated KPI Target | Operations |
The audit timeline is ordered from newest to oldest. Timestamps are displayed in the viewer's local timezone and are stored in UTC at the backend.
Audit Record Structure
Each audit record contains a consistent set of fields that describe what happened, who performed the action and where it occurred.
| Field | Description |
|---|---|
| Date & Time | When the activity occurred. |
| User | Authenticated user performing the action. |
| Activity | Description of the event. |
| Module | Platform area affected. |
| Department | Department where the activity occurred. |
| Status | Result of the action. |
Administration
Administrators use the audit log to understand what has changed across the platform and to support operational oversight. The audit log is read-only and provides a trusted source of activity history.
| Task | Purpose |
|---|---|
| Review platform activity | Observe significant actions performed across the organisation. |
| Understand historical changes | Trace when and by whom records were created or modified. |
| Investigate configuration changes | Examine administrative changes to departments, roles and settings. |
| Monitor organisational updates | Track changes to the organisation structure and workspace configuration. |
| Support governance reviews | Provide evidence for audits, reviews and access recertification. |
The audit log is an application-level record of authentication, administration and governance events. Immutability guarantees, configurable retention schedules, log export and SIEM forwarding are not implemented in this release. Records are viewed by authorised organisation administrators through the standard timeline view.
Governance Support
The audit log is a core governance tool. It provides the evidence needed to demonstrate that platform activity is visible, attributable and reviewable by authorised administrators and executives.
Accountability
The audit log links every significant action to an authenticated user, making it clear who is responsible for changes to strategy, governance and configuration.
Review readiness
Administrators and executives can review historical activity during governance meetings, access recertification exercises and compliance checks.
Operational transparency
Department leaders and contributors can see how their workspace has evolved over time, reducing ambiguity about when decisions were made and who approved them.
Access to the audit log is controlled by the organisation's permission model. Typically, administrators and executives have full visibility, department leaders have scoped visibility, and contributors and viewers have no direct access to audit records.
Relationship to Governance
The audit log sits at the end of the governance chain. Activity performed by users within departments flows through strategy and governance actions before being captured as a permanent audit record that administrators can review.
Users
Authenticated users perform actions across the platform.
Departments
Activity is scoped to the department where the change occurs.
Strategies
Strategic plans are created, updated and reviewed within departments.
Governance
Governance actions record approvals, reviews and sign-offs.
Audit Log
Significant activity is captured in the audit timeline.
Administrator
Administrators review audit information to support oversight.
Audit information supports transparency and governance by providing historical context. It allows administrators and reviewers to understand what changed, who made the change and how the change relates to departmental strategy and governance outcomes.
Best Practices
Information
Regular governance review
Regularly review audit activity during governance and strategy reviews. Historical activity provides context for decisions and helps validate that oversight steps were completed.
Best Practice
Understand strategic change
Use audit records to understand how strategic information has changed over time. The timeline shows who made changes, when they occurred and which department was affected.
Note
Historical visibility
Audit records provide historical visibility into platform activity and support organisational accountability. They are a trusted source for reviewing past decisions and administrative actions.