# Audit log (SyBox)

Where: Settings > Workspace > Audit log

What it is for: A list of who changed what in your workspace, and when. Use it to answer questions such as "who changed this automation?", "who gave this colleague more permissions?" or "who deleted these contacts?".

Who can open it: The workspace's main admin, and users with the "View the audit log" permission (Settings > Team and customers > Users). The permission is off by default.

What is recorded:

- Team and permissions: a user added, changed, switched on or off, or removed, including the permissions given and taken away, and two-step verification turned off.
- Labels, departments and quick replies, and contact fields.
- Automations and chatbots, including an automation run by hand from a conversation.
- AI agents: their instructions, knowledge base, words and switches, and the settings for all agents.
- Channels: WhatsApp numbers, Facebook pages, Instagram, Telegram bots, TikTok, Live Chat, SMS and email gateways.
- Templates, and broadcasts (created, started, paused, resumed, stopped, deleted).
- Integrations and API keys: webhooks, API keys, access links, ERP APIs, Chatwoot and Shopify.
- The workspace's own settings: Organization, Features, the verification code and the analytics report by email.
- Conversations deleted, and actions on a selection of conversations (Done, assign, archive, labels, departments, delete).
- Contacts deleted, imported and exported, and CRM customers deleted.

A change that was refused, or a save that changed nothing, is not recorded. Messages you send and read are not recorded.

What each entry shows:

- who made the change (or "SyBox, on its own", for example when a webhook was switched off after failing many times in a row)
- what they did and to what, for example "changed Welcome rule"
- the area, the date and time, the device (for example "Chrome · Windows") and the IP address
- what changed, as "before → after". A permission change shows "Gave:" and "Took away:". A secret, such as a password or an access key, shows only "(hidden)": its value is never kept. A long text, such as an agent's instructions, shows its length instead of its text.

Customers' phone numbers are never written in the log. A conversation is shown by the customer's name.

### How to find a change

1. Go to Settings > Workspace > Audit log.
2. Choose an area in "All areas", a person in "Everyone", or dates in "From" and "To". The list updates at once.
3. Type in the search box to find a name or a detail.
4. The newest changes come first. Click "Show older" at the bottom for more.

How long it is kept: one year. Older entries are removed automatically.

**Q: I can't see the Audit log.**

Ask your workspace's main admin to tick "View the audit log" for you in Settings > Team and customers > Users.

**Q: Can someone edit or delete an entry?**

No. Nobody in the workspace can change the log.

**Q: An import of many contacts shows as one entry. Is that right?**

Yes. An import or an export is sent in parts. The parts made by the same person within 15 minutes are one entry, with the total number of contacts.

Source: https://www.smartsybox.com/help/audit-log