Audit Logs

Track all user actions and system events with CargoLint's comprehensive audit logging.

What Gets Logged

CargoLint maintains comprehensive audit logs for all critical actions:

User Actions

  • Login/logout events with IP address and user agent
  • Account setting changes
  • API key creation/revocation
  • Permission modifications
  • Team member additions/removals

Document Actions

  • Document uploads
  • Manual field reviews and corrections
  • Status transitions
  • Download events

System Events

  • Webhook deliveries and failures
  • Batch operation results
  • Account upgrade/downgrade events

Viewing Audit Logs

Navigate to Settings > Audit Logs in the dashboard to view logs with:

  • Timestamp (UTC)
  • User who performed the action
  • Action type
  • Affected resource (document ID, user ID, etc.)
  • IP address and user agent

Use filters to narrow results by user, action type, or date range.

Audit Trail for Impersonation

When an admin or owner impersonates a team member, all actions during the impersonation session are logged with both the impersonator’s identity and the impersonated user, maintaining a complete audit trail.

Data Retention

  • Active Accounts - Audit logs are retained for the lifetime of the account
  • Deleted Accounts - IP addresses and user agents are anonymized as part of GDPR compliance

Compliance Features

  • All timestamps recorded in UTC for consistency
  • Immutable log entries
  • Full action trail with user, timestamp, and resource identifiers