> ## Documentation Index
> Fetch the complete documentation index at: https://storekit.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit Log

> Track staff actions across your storekit account with a searchable, exportable audit trail of who changed what, when, from where, and whether it succeeded.

The audit log gives you a tamper-resistant history of the actions your staff take across your account: who did what, to which resource, from where, and whether it succeeded. Use it to investigate changes, meet compliance requirements, and answer questions like "who cancelled that order?" or "when was this menu item updated?".

<Info>
  The audit log is restricted to **account owners and admins**. Staff on other roles will see a "restricted" message when they try to open it.
</Info>

## Where to find it

<Steps>
  <Step title="Open Reports">
    In the dashboard, go to **Reports → Logs**.
  </Step>

  <Step title="Open the Audit Log">
    Under the **Security** section, select **Audit Log**.
  </Step>

  <Step title="Search and filter">
    The most recent events load automatically. Narrow the results with filters, or export what you see to CSV.
  </Step>
</Steps>

## What gets recorded

Each entry captures the full context of a single staff action:

| Dimension    | What it tells you                                                                       |
| ------------ | --------------------------------------------------------------------------------------- |
| **Time**     | When the action happened (recorded at the moment of the action, not when it was stored) |
| **Actor**    | The staff member — name, email, and role at the time                                    |
| **Action**   | `create`, `update`, `delete`, `read`, or `export`                                       |
| **Resource** | The type of thing that was affected (e.g. `order`, `menu`, `discount`) and its ID       |
| **Store**    | The venue the action related to, where applicable                                       |
| **Outcome**  | Whether the request succeeded, plus the HTTP status                                     |

Selecting a row expands a detail panel with the request method, path, route, IP address, user agent, request ID, and trace ID, along with the error type when an action failed.

### Which actions are logged

* **All changes** are recorded — anything that creates, updates, or deletes data (including actions like archiving, cancelling, restoring, or publishing).
* **Sensitive reads** are recorded — viewing or downloading reports, exports, invoices, and statements. Opening the audit log itself is recorded as a `read`, and exporting it is recorded as an `export`.
* **Routine reads** (browsing lists, opening detail views, background polling) are **not** recorded, to keep the log focused on meaningful activity.

<Note>
  Actions taken by customers placing orders and by API keys are outside the scope of the audit log — it focuses on **staff actions** in the dashboard.
</Note>

## Searching and filtering

The audit log uses a faceted search bar. Add one or more filters and click **Apply**; active filters appear as removable pills. Available facets:

| Filter            | Description                                                |
| ----------------- | ---------------------------------------------------------- |
| **Action**        | Limit to `create`, `update`, `delete`, `read`, or `export` |
| **Outcome**       | Show only successful or only failed actions                |
| **Resource type** | e.g. `order`, `menu`, `product`, `discount`                |
| **Resource ID**   | A specific record's ID                                     |
| **Actor**         | A specific staff member                                    |
| **Store**         | One or more venues (limited to stores you have access to)  |

By default the log shows the last **30 days**. Results are paginated — use **Load more** to fetch older events. You can clear everything with **Clear all**.

<Tip>
  Combine facets to zero in on an incident — for example, filter by **Actor** and **Action: delete** to see everything a specific user removed.
</Tip>

## Exporting to CSV

Click **Export** to download the currently filtered results as a CSV file (with the same filters and date range applied). This is handy for sharing with auditors or archiving outside storekit.

<Info>
  Exports are capped at 50,000 rows. If you hit the cap, narrow the date range or add filters and export in smaller batches.
</Info>

## Privacy and data handling

The audit log is designed to record **what changed without capturing sensitive contents**:

* It stores the **names of the fields** involved in a change (e.g. "price, availability") — never the actual values that were submitted.
* Field names that look sensitive (passwords, tokens, keys, card details, PINs, and similar) are **automatically dropped** and never recorded.
* Records are **append-only**: entries are never edited or individually deleted, so the history stays trustworthy.

## Retention

Audit entries are retained for **30 days** by default. Enterprise accounts can request a longer retention period.

<AccordionGroup>
  <Accordion title="Who can see the audit log?">
    Only account owners and admins. Other staff roles cannot view or export it.
  </Accordion>

  <Accordion title="Why don't I see routine page views?">
    The log intentionally records changes and sensitive reads (reports, exports, invoices, statements) only. Everyday browsing and background requests are excluded so the log stays focused on meaningful activity.
  </Accordion>

  <Accordion title="Does the log store the data I changed?">
    No. It records which fields were involved in a change, but not the submitted values. Sensitive field names are dropped entirely.
  </Accordion>

  <Accordion title="How far back can I look?">
    Entries are kept for 30 days by default. If you need longer retention for compliance, [contact our team](/docs/getting-started/contact-support).
  </Accordion>

  <Accordion title="Can I export the whole log?">
    You can export the filtered results, up to 50,000 rows per export. For larger ranges, split the export into smaller date windows.
  </Accordion>
</AccordionGroup>


## Related topics

- [Integrations Overview](/docs/guides/integrations/overview.md)
- [PLU Mapping Guide](/docs/guides/integrations/pos/advanced/plu-mapping.md)
- [Manager PINs](/docs/guides/store-settings/manager-pins.md)
- [Security Policy](/docs/privacy-security/security-policy.md)
- [Testing Webhooks](/docs/developers/webhooks/testing-webhooks.md)