Audit logs

Chatevo records an immutable audit trail of security-relevant and configuration events for compliance and incident investigation.

What is logged

Category	Events
Authentication	Login, logout, failed login, API key created/revoked
Configuration	Assistant/KB/tool/deployment create, update, archive
Agent Builder	Confirmed writes, undo actions
Access	Credential viewed (metadata only), team invite, role change
Data	GDPR export/deletion requests
Security	Allowed domain changes, JWT secret rotation

Message content is not duplicated in audit logs — only metadata (conversation ID, actor, timestamp).

Audit feed (dashboard)

View recent events under Dashboard → Audit feed. Filter by:

Filter	Values
Actor	User email or `api_key`
Resource	Assistant, KB, tool, deployment ID
Action	`created`, `updated`, `deleted`, `login`, etc.
Date range	Last 7 / 30 / 90 days

API access

Enterprise plans can export audit logs via API:

GET /api/v1/audit-logs?since=2026-07-01T00:00:00Z&limit=100
Authorization: Bearer ch_live_xxx

Response entries:

{
  "id": "aud_9xY2zA4b",
  "action": "assistant.updated",
  "actor": { "type": "user", "email": "admin@example.com" },
  "resource": { "type": "assistant", "id": "asst_7xK9mN2p" },
  "summary": "Updated master_prompt",
  "ip": "203.0.113.10",
  "created_at": "2026-07-16T09:30:00Z"
}

Retention

Plan	Retention
Starter	90 days
Pro	1 year
Enterprise	Custom (up to 7 years)

Logs are append-only and cannot be edited or deleted by customers.

Compliance use

Audit logs support:

SOC 2 / ISO access reviews
Incident response (“who changed this deployment?”)
GDPR accountability (demonstrate deletion was performed)

Pair with your SIEM by exporting via API or requesting Enterprise log streaming.