> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://tieback.io/docs/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://tieback.io/docs/_mcp/server.

# Audit Log

> An append-only record of every governance-relevant action in a tieback workspace, with actor attribution, tenant scoping, and export for compliance.

The audit log is the workspace's append-only system of record for governance-relevant activity. It provides the evidence trail that compliance teams, auditors, and platform operators rely on when reconstructing the lifecycle of a product, passport, or member action.

## What Is Logged

| Category                     | Examples                                                            |
| ---------------------------- | ------------------------------------------------------------------- |
| **Workspace governance**     | Member invitations, role changes, ownership transfers, plan changes |
| **Product lifecycle**        | Product creation, attribute changes, deletion, identifier changes   |
| **Passport lifecycle**       | Mint, publish, revoke, break-glass amendment                        |
| **Theme & template changes** | Theme assignment, template publish, advanced template publish       |
| **Localisation changes**     | Market Pack assignment, multilingual payload publish                |
| **API & integration**        | API credential issuance and revocation, bulk update jobs            |
| **Tia AI activity**          | Tia interactions, staged actions, approvals                         |
| **Platform interventions**   | Platform-admin access, break-glass approvals                        |

## Properties of the Log

* **Append-only**: entries are never modified or deleted in place
* **Tenant-scoped**: every entry is bound to a `brand_id` and isolated by RLS
* **Actor-attributed**: every entry records who performed the action, including platform staff acting inside a tenant
* **Time-stamped deterministically**: entries are ordered by `created_at` to support reproducible reconstruction
* **Cross-referenced**: entries link to the affected product, passport, or member record

## Where to Read It

* **Settings → Audit Log**: interactive viewer with filters by actor, action category, and date range
* **API**: programmatic access for export into a brand's compliance platform
* **CSV export**: full or filtered export for offline retention

## Retention

Audit entries are retained for the lifetime of the workspace. Workspaces on enterprise plans can extend retention into long-term archival storage for regulatory archiving (for example, ESPR record-keeping requirements).

## Related Docs

* [Tenancy, Roles & Members](/tenancy-governance/roles-members)
* [Break-Glass Amendments](/passports/controlled-update-break-glass)
* [Security Architecture](/getting-started/security-architecture)