What Gets Logged
Every create, update, and delete operation on platform resources is recorded automatically. Audit Logs also capture billing events. No configuration is required — logging is always on.Resource Types
An administrator setting or resetting a user’s password from Manage → Users is filed as a RESET_PASSWORD entry against that user, and revoking a pending invitation as a delete. Both are filterable from the action dropdown. See Users.A password you change or set for yourself in Settings → Profile Settings isn’t recorded in Audit Logs. See Change Your Password.
Billing Events
Viewing Audit Logs
Open Studio → Manage → Audit Logs to view the full log table for your workspace. Logs are displayed in reverse chronological order. Each row shows:
Click any row to expand the full payload — the complete set of changes recorded for that event. Sensitive fields such as passwords, API keys, and tokens are automatically redacted from stored payloads.
Filtering
Use the filter bar at the top of the log table to narrow results:
Filters can be combined. The table updates in real time as you apply them.
Data Retention & Security
- Audit log records are stored in Google Cloud BigQuery.
- All sensitive fields in event payloads are automatically redacted before storage — passwords, API keys, tokens, and client secrets are never written to the log.
- Logs are retained for the lifetime of the workspace and are not subject to the standard 60-day call data retention policy.
- Access to Audit Logs is restricted to admin-level users within the workspace.
Enterprise customers can request audit log exports for external compliance reviews. Contact security@squawkvoice.ai for assistance.