> ## Documentation Index
> Fetch the complete documentation index at: https://docs.avra.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit Logs

> Tamper-evident record of sensitive actions across the dashboard and API.

Avra maintains audit logs of workspace activity to support security monitoring, incident response, and compliance.

## What is recorded

The platform captures events across the same catalog used by [Webhooks](/data-operations/webhook-notifications) and [Notifications](/dashboard/notifications):

### Identity and access

* User logins, SSO authentication, session creation
* Invitation creation, acceptance, and revocation
* Member additions, role updates, and removals
* Organization configuration changes

### Workspace and access control

* Workspace creation, update, archival, unarchival
* API key creation, rotation, renaming, and deletion

### Data and model operations

* Batch input uploads and deletions
* Batch requests, lifecycle transitions, interruptions, result downloads and deletions
* Model version activation, deactivation, promotion, and demotion
* Real-time prediction consumption via API and dashboard

Each event captures the actor, the target resource, the workspace, and an immutable timestamp.

## Accessing the audit trail

Navigate to **Observability → Audit** in the dashboard. Users with the **Creator** or **Auditor** role can review events.

For programmatic export or custom retention requirements, contact your account representative.

## Use this for

* **Security monitoring** — detect unusual access patterns, failed authentications, or unexpected model promotions
* **Incident response** — reconstruct what happened, by whom, and when
* **Regulatory compliance** — produce evidence for SOC 2, ISO 27001, LGPD, GDPR, and internal audit
* **Change management** — review who promoted which model version, who rotated which API key