# The workspace audit log

URL: https://docs.xodia.ai/workspace/audit-log
Last updated: 2026-11-08

The audit log records who signed in and what changed in your workspace: members, billing, connections, tokens and projects. Owners and admins can open it on every plan.

_Picture: Organization settings, Audit log: workspace events newest first with Export CSV, filters for person and action, a GitHub sign-in from Lisbon, a failed sign-in marked in amber, an invitation, a role change and a plan change, and the note that no IP addresses, passwords or tokens are stored._

## Open the audit log

1. Open Organization settings

   Choose your name at the foot of the workspace sidebar, then Organization settings.
2. Choose Audit log

   Audit log is under Workspace, between Roles and permissions and Danger zone. It lists Workspace events, newest first.

Members don't see Audit log in the list; opening its address shows that only workspace owners and admins can see it.

## What is recorded

- Sign-ins, with the method (Password, GitHub, Google or Token), the city and country, and the email. Failed sign-ins are tinted amber with a warning badge.
- Password changes and resets.
- Invitations, members joining, leaving and being removed, role changes and ownership transfers.
- Plan changes, extra seats and payment method changes. Changes made by billing itself show as Xodia.
- Connections added and removed, and tokens created and revoked: MCP access and the Xodia helper.
- Projects created and deleted, and workspace settings.

No IP addresses, passwords or tokens are stored.

## Filter and export

Filter by person and by action, a single action or a whole group such as All sign-ins. Export CSV downloads up to 10,000 rows with the filters you have set.

## How long it is kept

Events are kept for 90 days on every plan.

## Next

Changes inside a site, by people and their AI, are in its Site activity: see [Work together on a site](https://docs.xodia.ai/workspace/collaboration#activity).
