Skip to main content
Avra maintains audit logs of workspace activity to support security monitoring, incident response, and compliance.

What is recorded

The platform captures events across the same catalog used by Webhooks and Notifications:

Identity and access

  • User logins, SSO authentication, session creation
  • Invitation creation, acceptance, and revocation
  • Member additions, role updates, and removals
  • Organization configuration changes

Workspace and access control

  • Workspace creation, update, archival, unarchival
  • API key creation, rotation, renaming, and deletion

Data and model operations

  • Batch input uploads and deletions
  • Batch requests, lifecycle transitions, interruptions, result downloads and deletions
  • Model version activation, deactivation, promotion, and demotion
  • Real-time prediction consumption via API and dashboard
Each event captures the actor, the target resource, the workspace, and an immutable timestamp.

Accessing the audit trail

Navigate to Observability → Audit in the dashboard. Users with the Creator or Auditor role can review events. For programmatic export or custom retention requirements, contact your account representative.

Use this for

  • Security monitoring — detect unusual access patterns, failed authentications, or unexpected model promotions
  • Incident response — reconstruct what happened, by whom, and when
  • Regulatory compliance — produce evidence for SOC 2, ISO 27001, LGPD, GDPR, and internal audit
  • Change management — review who promoted which model version, who rotated which API key