Security and audit

Everything on this page lives in Settings. Which sections you see depends on your role, see Sign-in and roles. How settings work in general is described in Settings.

Audit logCopy Anchor Link

Audit Log tracks all activity and authorization decisions across the organisation. Choose a Source: All sources, App events or Access checks. Filter by action, resource, access check (Allowed or Denied) and user, move between pages with Previous and Next, and press Refresh. A row shows Time, User, Action, Resource and Details with Metadata, Resource ID and User ID.

Try it

Good to know

• Clear filters resets all filters. With no match the page says "No audit events found".
• Reading the audit trail is a right in Roles & Rights (resource Audit trail). A custom role needs that right first.

EncryptionCopy Anchor Link

Encryption shows what is stored encrypted in your organisation, as a chart. You can look at it by area (for example Documents, Tasks, Approvals, Connector credentials), by type of data and over time (daily, hourly, monthly, yearly), and filter by area. Each area lists the fields that are sealed, such as document text, comments, signature images or the company master data. If the state cannot be read, the page says "The key status could not be retrieved." instead of a number.

Good to know

• "No data has been stored for this organization yet." appears for a new organisation.
• Without a second measurement the trend shows "No trend yet".

Data and privacyCopy Anchor Link

Data & Privacy shows your consent to product and marketing emails (you can change it), the dates on which you accepted the privacy policy and the terms, your profile (display name and email, which you can correct), and the data protection contact of the organisation. If no data protection officer is set, owners set one under Organization.

Try it

Your devicesCopy Anchor Link

Under Auth, tab Sessions, Signed-in devices lists the devices you are signed in on: the kind (desktop, laptop, phone, tablet), the method (password or email code), whether a second factor was confirmed, when you signed in, when the device was last active and until when the sign-in is valid. The current one is marked This device, and every other row has Sign out to end that sign-in. Sign-in methods, passkeys and two-factor authentication are set up under the Account tab, see Sign-in and roles.

Good to know

• If only this device is signed in, the page says there is nothing else to do.

Danger zoneCopy Anchor Link

The Danger Zone has these actions:

• Sign out everywhere signs out all your devices. Every role has it.
• Leave organization is offered to members who are not owners.
• Export my data downloads your data. If it is only partly possible, the app tells you.
• Delete Account schedules the deletion of your account and its data. The detail line shows the date; Cancel Deletion stops it before that date. A sole owner cannot simply delete the account ("Cannot delete account"): the dialog offers Delete Organization & Account instead.
• Delete organization is for owners. The organisation and all its data are deleted permanently after a grace period of 7 days, and Cancel Organization Deletion stops it before.