Read and export the platform audit log
When who did what with which role – with before/after, reason and result, tamper-protected.
SicurezzaBase (gratuito)Verificato il 30.10.2026
Questo articolo per ora è disponibile solo in tedesco e inglese; mostriamo la versione inglese.
Requisiti
- You are the platform owner (or have the role with the “read audit” right) and a second factor.
Chi può farlo?
Platform side: platform owner; roles with “read audit” (Auditor, Privacy) are intended. Only the platform owner can undo. Others see “Page not found”. Every look at details and every export is itself logged.
Passo dopo passo
Open the log
Open “Platform audit trail” (also via platform moderation). The note “Confidential — purpose limitation” reminds you: only for review, security and accountability.
Filter
Choose period (default 30 days), “Person”, “Role at the time”, “Action”, “Object”, “Organization”, “Result” or free text (free text requires a period of at most one year). Click “Apply”.
View details
With “Details” you see “Changes” (field, before, after). Viewing is itself logged.
Check tamper protection
Click “Check tamper protection”. “Hash chain OK” means chain, search columns and details match; “Hash chain broken” is itself a finding.
Export
With “Export as CSV” and confirmation you get up to 20,000 rows with time in UTC and Berlin, without before/after values. The file is confidential.
Undo (owner only)
For entries with a defined reversal choose “Undo”, view the preview, enter a reason (at least 10 characters) and confirm with the password. If the current state differs, the entry is skipped and reported.
Trovi la funzione qui: /plattform/audit
Errori comuni e soluzioni
- “Please choose a period for text search.”
- Set from and to dates (at most one year).
- “Second factor required”
- Set up a passkey or authenticator app and reopen the page.
- An entry cannot be undone.
- It says “Not undoable: {reason}”. Only actions with a defined, complete reversal without side effects can be reversed.
Da sapere
- The log can only be appended to; entries are never changed. Retention 3 years, shortened only from the start of the chain. After account deletion the person appears as “Deleted account”.
- No performance or behavior monitoring of staff: observe the purpose limitation.