# Audit log (/security/audit-log) The audit log is a per-project record of security and admin actions: who did what, when, and from which IP address. It's the place to check after a role change, a deleted domain, or an approval decision you weren't expecting. ## What's recorded Security- and admin-relevant changes are recorded, including: * **Roles** — create, update, delete. * **Members** — role change, add, remove. * **Domains** — add, verify, delete. * **API keys** — create, revoke. * **Project** — update, reset, delete. * **SSO / SCIM / approvals** — configuration changes and approval decisions. Content operations — campaign sends, contact imports, and the like — aren't recorded here; the audit log covers the access-control surface, not day-to-day content activity. Platform-staff actions (Bitelio support or admin operations that reach across tenants) are logged separately and never appear in a project's own audit log. ## Reading the log Go to **Settings → Audit log**, gated by the `settings:manage` permission. Entries are newest-first and paginated; filter by action type or by a time window to narrow down to the change you're looking for. ## What's next Require a second person to approve campaign sends. Back to the overview of the access-control surface.