Audit
Bitaic audit logs give Admins a time-ordered record of security, configuration, account, session, integration, export, and deletion activity inside a workspace. Use audit records to investigate changes, verify administrative actions, and support compliance reviews.
Audit Record Fields
- Timestamp in UTC.
- Actor identity, role, token, or system actor where available.
- Workspace, target, check, integration, webhook, or user context.
- Action category, event code, result, and request identifier.
- Before/after metadata when the event safely supports it.
Access And Export
- Audit log access is reserved for Admins or approved API scopes.
- Audit records are protected from customer editing through normal product UI.
- Audit exports use approved dashboard or API export flows with CSV or JSON output.
- Active audit history uses the 12-month default retention baseline unless workspace policy or contract sets a different period.
Audit Events Tracked
The audit taxonomy covers these administrative and security event families.
| Category | Examples | Recorded context |
|---|---|---|
| Authentication | Login, failed login, logout, password reset, and MFA events. | Actor, session, result, timestamp, and request context. |
| Authorization | Role assignment, permission changes, and access decisions. | Actor, affected user or token, old role, new role, and result. |
| User lifecycle | User creation, deletion, lock, unlock, and profile updates. | Actor, affected user, changed fields, result, and request ID. |
| Session lifecycle | Session creation, timeout, manual logout, and Admin revocation. | Actor, session, device context, termination reason, and result. |
| Monitoring configuration | Target, check, threshold, agent, alert policy, and integration changes. | Actor, target or check, changed settings, result, and request ID. |
| Tokens and webhooks | API token creation, revocation, webhook subscription changes, and signing-secret rotation. | Actor, token or subscription metadata, scopes, and result. |
| Data governance | Exports, deletion requests, and sensitive data access. | Actor, data scope, export or request ID, and result. |
Best Practices
- Review audit records after administrative changes.
- Export audit records before retention windows expire.
- Correlate audit records with request IDs from API responses and webhook delivery IDs when investigating automation behavior.