Read and export the platform audit log
When who did what with which role – with before/after, reason and result, tamper-protected.
SécuritéBase (gratuit)Vérifié le 30.10.2026
Cet article n’est pour l’instant disponible qu’en allemand et en anglais ; nous affichons la version anglaise.
Prérequis
- You are the platform owner (or have the role with the “read audit” right) and a second factor.
Qui peut le faire ?
Platform side: platform owner; roles with “read audit” (Auditor, Privacy) are intended. Only the platform owner can undo. Others see “Page not found”. Every look at details and every export is itself logged.
Pas à pas
Open the log
Open “Platform audit trail” (also via platform moderation). The note “Confidential — purpose limitation” reminds you: only for review, security and accountability.
Filter
Choose period (default 30 days), “Person”, “Role at the time”, “Action”, “Object”, “Organization”, “Result” or free text (free text requires a period of at most one year). Click “Apply”.
View details
With “Details” you see “Changes” (field, before, after). Viewing is itself logged.
Check tamper protection
Click “Check tamper protection”. “Hash chain OK” means chain, search columns and details match; “Hash chain broken” is itself a finding.
Export
With “Export as CSV” and confirmation you get up to 20,000 rows with time in UTC and Berlin, without before/after values. The file is confidential.
Undo (owner only)
For entries with a defined reversal choose “Undo”, view the preview, enter a reason (at least 10 characters) and confirm with the password. If the current state differs, the entry is skipped and reported.
Vous trouverez la fonction ici : /plattform/audit
Erreurs fréquentes et solutions
- “Please choose a period for text search.”
- Set from and to dates (at most one year).
- “Second factor required”
- Set up a passkey or authenticator app and reopen the page.
- An entry cannot be undone.
- It says “Not undoable: {reason}”. Only actions with a defined, complete reversal without side effects can be reversed.
Bon à savoir
- The log can only be appended to; entries are never changed. Retention 3 years, shortened only from the start of the chain. After account deletion the person appears as “Deleted account”.
- No performance or behavior monitoring of staff: observe the purpose limitation.