A record of important actions
An audit log might record: “Alex downloaded the customer list at 10:15 on Tuesday.” It also tracks sign-ins, permission changes, and approvals. Each entry usually shows who or what acted, what was affected, and the result.
Teams use these records to investigate security incidents, answer customer questions, and show whether rules were followed. Other logs often help diagnose software problems.
Apps usually send audit records to protected storage, making them harder to lose or alter.
Make the record trustworthy
Limit who can read or change the log, use accurate times, and decide how long to keep entries. Leave out passwords, access tokens, and unnecessary personal details. Make the log searchable and watch for unusual activity. Someone who can quietly erase their own actions makes the record unreliable.