> ## Documentation Index
> Fetch the complete documentation index at: https://docs.voxhealth.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit log

> Who changed what, and when.

**Settings → Audit Log.** Admin and super admin can read the whole organization's log. Every user can read their own entries.

## What is recorded

Configuration changes and access to sensitive records: settings edited, staff added or removed, roles changed, integrations reconnected, assistants and capabilities modified, patient records accessed.

Entries are append-only. Nobody can edit or delete them, including admins.

## When to use it

<AccordionGroup>
  <Accordion title="Something changed and nobody knows who">
    The most common use. Filter to the day it started behaving differently.
  </Accordion>

  <Accordion title="A capability turned itself off">
    It did not. Someone turned it off. The log says who and when.
  </Accordion>

  <Accordion title="Access review">
    Periodically checking who has access to patient records is part of a HIPAA security program. This is the record you review.
  </Accordion>

  <Accordion title="Investigating a complaint">
    If a patient asks who accessed their record, this answers it.
  </Accordion>
</AccordionGroup>

## Making it useful

The log is only worth reading if each entry belongs to a person. That means:

* No shared logins. A shared account makes every entry say "the front desk did it".
* Remove access when people leave, so the set of names in the log stays the set of people who work there.

<Note>
  The audit log is a compliance control, not a debugging tool. It records who did what. It does not record why, and it will not tell you what a patient said on a call. That is in [Calls](/front-desk/calls).
</Note>

## Related

* [Security overview](/security/overview)
* [Staff](/team/staff)