Activity Log

What is the Activity Log?

The Activity Log is a tamper-evident audit trail of every significant action taken in Asenion. It records who did what, when, from which IP address, and what changed — providing the evidence trail required for governance audits and compliance reviews.

Logs are immutable. Entries cannot be edited or deleted.


Scope

Asenion maintains two levels of activity log:

Level Scope Access
Organization log All actions across the entire organization Org Admins (org:view_activity_log)
Project log Actions within a specific AI system Project members (project:view_activity_log)
System log Actions across all organizations System Admins only

Log categories

Every entry is classified into one of six categories:

Category What it covers
Access Login events, session starts, organization context switches
People Member invitations, role changes, capability overrides, removals
Integration Connection creation, updates, activation, deletion
Configuration Organization settings changes, lifecycle config imports, 2FA enforcement changes
Projects AI system creation, archiving, policy assignment, lifecycle stage changes
Policies Policy import, control bundle edits, control changes, policy library updates

Each log entry includes

  • Who — user name and email
  • What — action description (e.g. “Invited user to organization”, “Approved assessment”)
  • Category — one of the six above
  • Target — the record affected (AI system name, policy name, member email, etc.)
  • When — timestamp
  • Where — IP address and user agent
  • Changes — field-level diff showing old and new values (where applicable)

The Activity Log can be filtered by:

  • User — see all actions by a specific person
  • Category — narrow to a specific type of action
  • Date range — from / to date picker
  • Search — free-text search across descriptions and target names

How to access

  • Organization log: Organization Settings → Activity Log (requires org:view_activity_log)
  • Project log: AI System → Activity Log (requires project:view_activity_log)

  • Permissions — capability requirements for log access
  • User Roles — which roles carry log-access capabilities by default
  • Admin — Org Admin and System Admin log visibility