Audit and retention

The audit log

Governed actions are written to an append-only log: who did what, to which object, in which organization, and when. Append-only is enforced by the database, not by application code choosing to behave.

• Records cannot be edited or deleted through the application.
• The log is scoped to your organization when you read it.
• Refusals are recorded too. A blocked action leaves a trace even though it did not happen.

What gets recorded

• Publishing a workflow, and changes to its status.
• Approval decisions, expiries and reassignments.
• Guardrail blocks and overrides.
• Connection creation, granting, revocation and use.
• Membership, role and department changes.

Retention

Deleting a workflow or an agent moves it to trash, where it can be restored. After thirty days it is permanently erased, and that erasure takes its runs, steps, approvals and stored conversation with it.