Skip to main content
Settings → Audit Log. Admin and super admin can read the whole organization’s log. Every user can read their own entries.

​
What is recorded

Configuration changes and access to sensitive records: settings edited, staff added or removed, roles changed, integrations reconnected, assistants and capabilities modified, patient records accessed. Entries are append-only. Nobody can edit or delete them, including admins.

​
When to use it

The most common use. Filter to the day it started behaving differently.
It did not. Someone turned it off. The log says who and when.
Periodically checking who has access to patient records is part of a HIPAA security program. This is the record you review.
If a patient asks who accessed their record, this answers it.

​
Making it useful

The log is only worth reading if each entry belongs to a person. That means:
  • No shared logins. A shared account makes every entry say “the front desk did it”.
  • Remove access when people leave, so the set of names in the log stays the set of people who work there.
The audit log is a compliance control, not a debugging tool. It records who did what. It does not record why, and it will not tell you what a patient said on a call. That is in Calls.