> ## Documentation Index
> Fetch the complete documentation index at: https://docs.prisme.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Audit Logs

> Track every administrative action for security and compliance

Because Prisme.ai is natively traceable, Governe turns that event stream into an immutable audit trail. Audit logs record all administrative actions in your organization, giving you the evidence you need for security reviews and compliance.

## Accessing audit logs

Go to **Audit** in the Governe sidebar.

## Event categories

| Category         | Events tracked                            |
| ---------------- | ----------------------------------------- |
| **member**       | Member added, updated, removed, suspended |
| **role**         | Role created, updated, deleted, assigned  |
| **org**          | Organization settings changed             |
| **sso**          | SSO provider added, updated, deleted      |
| **quota**        | Quota limits changed                      |
| **apikey**       | API key created, rotated, revoked         |
| **auth**         | Login attempts, SSO events                |
| **subscription** | Subscription changed                      |
| **invite**       | Invite created, used, revoked             |
| **group**        | Group created, updated, members changed   |

## Event structure

Each audit event contains:

| Field         | Description                              |
| ------------- | ---------------------------------------- |
| **timestamp** | When the event occurred                  |
| **category**  | Event category (member, role, etc.)      |
| **action**    | Specific action (create, update, delete) |
| **target**    | What was affected (user, role, etc.)     |
| **changes**   | Before/after values                      |
| **metadata**  | Additional context                       |

### Example event

```json theme={null}
{
  "timestamp": "2024-03-15T10:30:00Z",
  "category": "member",
  "action": "role_changed",
  "target": {
    "type": "user",
    "id": "user_123",
    "email": "jane@acme.com"
  },
  "changes": {
    "before": { "roleSlug": "viewer" },
    "after": { "roleSlug": "admin" }
  },
  "metadata": {
    "changedBy": "admin@acme.com"
  }
}
```

## Filtering logs

* Filter by **date range**
* Filter by **category**
* Search by **user email** or **target ID**

## Retention

Audit logs are retained according to your subscription tier:

| Tier       | Retention                |
| ---------- | ------------------------ |
| Free       | 7 days                   |
| Starter    | 30 days                  |
| Pro        | 90 days                  |
| Enterprise | Custom (up to unlimited) |

See [Subscriptions & Quotas](./subscriptions-quotas) to review or change your tier.

## Compliance scenarios

<Tabs>
  <Tab title="SOC 2">
    For SOC 2 compliance:

    1. Enable audit logging (Pro tier minimum)
    2. Review access changes monthly
    3. Document role assignment justifications
    4. Export audit logs for external review
  </Tab>

  <Tab title="GDPR">
    For GDPR compliance:

    1. Track member data access in audit logs
    2. Document data processing activities
    3. Enable SSO for centralized identity
    4. Review API key usage patterns
  </Tab>

  <Tab title="HIPAA">
    For HIPAA compliance (Enterprise tier):

    1. Extended audit log retention
    2. Encryption at rest and in transit
    3. Access control audit trails
    4. Business Associate Agreement (BAA)
  </Tab>
</Tabs>

## Best practices

<CardGroup cols={2}>
  <Card title="Regular audits" icon="clipboard-check">
    Review audit logs monthly for security
  </Card>

  <Card title="Document changes" icon="pen-to-square">
    Justify role and access changes
  </Card>
</CardGroup>

## Next steps

<CardGroup cols={2}>
  <Card title="Identity & Access" icon="users-gear" href="./identity-access">
    Manage members and permissions
  </Card>

  <Card title="Subscriptions & Quotas" icon="gauge" href="./subscriptions-quotas">
    Plans, usage limits and cost control
  </Card>
</CardGroup>


## Related topics

- [List audit events for an organization](/ai-governance-v2/orgs/list-audit-events-for-an-organization.md)
- [Security](/api-reference/security.md)
- [Data Retention](/products/ai-governance/retention.md)
- [Single Sign-On (SSO)](/resources/security/sso.md)
- [Identity & Access Management](/products/ai-governance/identity-access.md)