---
title: Audit Logs
description: Tamper-evident record of sensitive actions across the dashboard and API.
---

Avra maintains audit logs of workspace activity to support security monitoring, incident response, and compliance.

## What is recorded

The platform captures events across the same catalog used by [Webhooks](/pt-BR/integrate/webhook-notifications) and [Notifications](/pt-BR/dashboard/notifications):

### Identity and access
- User logins, SSO authentication, session creation
- Invitation creation, acceptance, and revocation
- Member additions, role updates, and removals
- Organization configuration changes

### Workspace and access control
- Workspace creation, update, archival, unarchival
- API key creation, rotation, renaming, and deletion

### Data and model operations
- Batch input uploads and deletions
- Batch requests, lifecycle transitions, interruptions, result downloads and deletions
- Model version activation, deactivation, promotion, and demotion
- Real-time prediction consumption via API and dashboard

Each event captures the actor, the target resource, the workspace, and an immutable timestamp.

## Accessing the audit trail

Navigate to **Observability → Audit** in the dashboard. Users with the **Creator** or **Auditor** role can review events.

For programmatic export or custom retention requirements, contact your account representative.

## Use this for

- **Security monitoring** — detect unusual access patterns, failed authentications, or unexpected model promotions
- **Incident response** — reconstruct what happened, by whom, and when
- **Regulatory compliance** — produce evidence for SOC 2, ISO 27001, LGPD, GDPR, and internal audit
- **Change management** — review who promoted which model version, who rotated which API key