Audit Logs
Tamper-evident record of sensitive actions across the dashboard and API.
Avra maintains audit logs of workspace activity to support security monitoring, incident response, and compliance.
What is recorded
The platform captures events across the same catalog used by Webhooks and Notifications:
Identity and access
- User logins, SSO authentication, session creation
- Invitation creation, acceptance, and revocation
- Member additions, role updates, and removals
- Organization configuration changes
Workspace and access control
- Workspace creation, update, archival, unarchival
- API key creation, rotation, renaming, and deletion
Data and model operations
- Batch input uploads and deletions
- Batch requests, lifecycle transitions, interruptions, result downloads and deletions
- Model version activation, deactivation, promotion, and demotion
- Real-time prediction consumption via API and dashboard
Each event captures the actor, the target resource, the workspace, and an immutable timestamp.
Accessing the audit trail
Navigate to Observability → Audit in the dashboard. Users with the Creator or Auditor role can review events.
For programmatic export or custom retention requirements, contact your account representative.
Use this for
- Security monitoring — detect unusual access patterns, failed authentications, or unexpected model promotions
- Incident response — reconstruct what happened, by whom, and when
- Regulatory compliance — produce evidence for SOC 2, ISO 27001, LGPD, GDPR, and internal audit
- Change management — review who promoted which model version, who rotated which API key