Audit log export

On the Enterprise plan, owners download the audit log from Enterprise → Audit log export for a security monitoring system (SIEM), a records request or an auditor.

Choose a date range (up to 366 days) and a format:

• CSV: one row per change, with a header row. Cells that a spreadsheet would read as a formula are prefixed with '.
• NDJSON: one JSON object per line.

Each row has when it happened, who did it (a member, the directory or a system process), the action, the record and the fields that changed. An export holds up to 100,000 rows; narrow the range for more. Rows about records an information barrier hides from you are left out.

The download itself is recorded in the audit log. For a daily feed, add the audit log to a bulk export; for your own programs, use an API key with audit:read (Public API).