Audit Logs
Track every administrative change across your organization — who did what, when, and from where.
Audit logs record every administrative action across your organization. API key created, security rule changed, provider key rotated, rate plan updated — it's all logged with the actor, timestamp, IP address, and metadata.
This is separate from AI request logs, which track individual AI requests and responses. Audit logs track changes to your Cencori configuration — the actions your team takes in the dashboard or through management APIs.
What Gets Logged
Every mutation to your organization or project configuration is recorded:
Each log entry includes:
- Timestamp — millisecond precision
- Category — what area was affected
- Action — what happened (created, updated, deleted, revoked, etc.)
- Description — human-readable summary
- Actor — email address of the user who made the change
- Actor IP — IP address of the request
- Actor type —
user,system,api, orwebhook - Resource type and ID — what was changed
- Project — which project was affected (if applicable)
- Metadata — structured JSON with before/after values and additional context
Viewing Audit Logs
Open Organization settings (from the user menu) and go to Audit Log. The page shows a table of events, newest first.
Audit logs are available on paid plans (Pro, Team, and Enterprise).
Filtering
Use the filter bar to narrow results:
- Category — filter by area (API key, security, billing, etc.). The API key, member, and SSO categories require the Team or Enterprise plan.
- Time range — last hour, 24 hours, or 7 days on Pro; 30 and 90 days on Team and Enterprise; all time on Enterprise
- Project — scope to a specific project
- Search — full-text search across event descriptions
Event Details
Click any row to open the event details:
- Actor, actor type, and source IP address
- Scope (organization or project)
- Resource type and ID
- Timestamp and event ID
- Complete metadata JSON (includes before/after values where applicable), with a copy button
Exporting
Click Export on the audit log page and choose Export as CSV or Export as JSON. Exports require the Team or Enterprise plan.
Exports respect your current filters — if you've filtered to a specific category, time range, or project, only matching entries are exported.
- CSV — up to 50,000 rows. Opens in Excel, Google Sheets, or any spreadsheet tool.
- JSON — full structured data including metadata. Useful for feeding into a SIEM, data warehouse, or custom analysis pipeline.
Access Control
Audit logs are restricted to organization owners and admins. Members with other roles cannot view or export audit logs. This is enforced at both the API and database level (RLS).
Retention
Audit logs are retained indefinitely. There is no automatic deletion. For compliance purposes, you can export logs at any time for long-term archival in your own systems.
Compliance
Audit logs support common compliance requirements:
- SOC 2 — demonstrate that access and configuration changes are tracked and attributable to specific users
- ISO 27001 — satisfy change management and access logging controls
- GDPR — trace who accessed or modified systems that process personal data
- HIPAA — maintain audit trails for systems handling protected health information
- Internal investigations — reconstruct the exact sequence of changes leading to an incident
Related
- AI Request Logs — individual AI request/response logs with token usage and cost
- PII Protection — opt-in blocking of requests that contain personal data
- Organizations — organization structure and member management