# Audit Logging {#audit-logging}


Track user actions and system events for compliance and security auditing.


## Overview {#overview}


Ever Gauzy maintains comprehensive audit logs through two mechanisms:

1. **Activity Logs** — entity-level change tracking
2. **API Call Logs** — HTTP request/response logging


## Activity Logs {#activity-logs}


Every entity change is recorded with:

| Field           | Description                     |
| --------------- | ------------------------------- |
| Entity          | Changed entity type             |
| Entity ID       | Changed entity identifier       |
| Action          | `CREATED`, `UPDATED`, `DELETED` |
| Actor Type      | `User` or `System`              |
| Updated Fields  | List of changed field names     |
| Updated Values  | New field values                |
| Previous Values | Old field values                |
| Creator         | User who made the change        |
| Timestamp       | When the change occurred        |


## API Call Logs {#api-call-logs}


HTTP request/response recording:

| Field           | Description       |
| --------------- | ----------------- |
| URL             | Request URL       |
| Method          | HTTP method       |
| Status Code     | Response status   |
| Request Headers | Request headers   |
| Request Body    | Request payload   |
| Response Body   | Response payload  |
| IP Address      | Client IP address |


## Viewing Audit Logs {#viewing-audit-logs}


Audit logs are accessible via:

- **API**: [`GET /api/activity-log`](https://sourcey-gauzy.pages.dev/api/activity-log-endpoints/index.md)
- **Admin UI**: **Settings** → **Audit Logs**


## Related Pages {#related-pages}


- [Activity Log Endpoints](https://sourcey-gauzy.pages.dev/api/activity-log-endpoints/index.md) — API reference
- [API Security Best Practices](https://sourcey-gauzy.pages.dev/security/api-security-best-practices/index.md) — security guide