<!-- No screenshot: exposes real user names and orgs -->
Activity Logs provide a tamper-evident audit trail of all significant actions within a Docupath tenant - spanning document lifecycle events, configuration changes, and user administration actions. The module serves as the single source of truth for answering "who did what, where, and when" across the platform.
Activity Logs supports keyword search, a Filters panel for narrowing by organization and date, an Organization column showing the scope each action affected, and expandable detail views that reveal before/after values for configuration changes. What any given user sees is scoped to the organizations they have access to and the modules they can already work in, so the log is both org scoped and access scoped. Activity Logs are essential for compliance reporting, troubleshooting, and maintaining operational accountability.
How It Works
What Is Captured
Activity Logs track actions that change system state or have compliance relevance, organized into three categories:
Document Lifecycle Events
Document uploads, approvals, rejections, and reprocessing
Trading party assignments and changes
Document status transitions
Configuration and Security Changes
System Settings updates (branding, retention, duplicate handling)
API credential creation, rotation, and deletion
Instruction Build, Transformation Rule, and Rejection Rule changes, including enabling and disabling an individual instruction or rule
Customize Captured Fields configuration changes
User Administration
User creation, role assignments, and profile edits
Invitation status changes
Organization-level user mapping changes
Interface Overview
Activity Logs are opened from the main menu, under Activity logs, and provide:
Feature | Description |
Search Bar | Sits above the table. Looks up events by user, keyword, or action type |
Filters | A panel holding both Organizations and Date, opened from the Filters button to the right of the search bar |
Expand Control (▾) | Reveals structured details including before/after values for changes |
The log table displays four columns:
Column | Description |
Date and time | Timestamp of the action |
User | The user who performed the action |
Activity | Description of what was done |
Organization | The scope the action affected - a named organization, or All organizations for a tenant-wide change |
Search and Filters are independent controls and can be used separately or together. Search finds specific entries by keyword; Filters narrows the table by organization and by date.
Log entries are copy-friendly, making them suitable for inclusion in support tickets, audit notes, or compliance reports.
The Filters Panel
Date selection no longer sits on its own above the table. Both Organizations and Date now live together in a Filters panel, opened from the Filters button to the right of the search bar. This is the same filtering pattern used by the document pending list view, so the interaction is consistent across the platform.
Organizations expands into a searchable, multi-select list of the organizations you have access to. Sub-organizations are nested under their parent organization, so you can select a parent, individual children, or any combination. The list also offers:
Search - a box within the Organizations section, separate from the search bar above the table, for narrowing a long organization list
Select All - select every organization in the list at once
Unassigned - tenant-wide entries, the ones shown as All organizations in the Organization column
Date expands into a Start & end date box. Clicking it opens the Select start and end date dialog, which shows two side-by-side calendars, each with its own month and year dropdown. Choose the start date on the left calendar and the end date on the right, then click Save to return to the panel with the range set. Cancel closes the dialog without setting a range.
The panel itself has three controls:
Control | What it does |
Apply | Commits the selected filters to the table |
Cancel | Closes the panel without changing the active filters |
Clear all | Removes every active filter and resets the view |
Filters are combined, so selecting both organizations and a date range returns only entries matching both.
Log Visibility and Scope
Access to Activity Logs is a permission first and a scope second.
Of the roles a tenant ships with, only Admin and Manager can open Activity Logs. To give anyone else access, an Admin creates a custom role and explicitly enables read permission on Activity Logs.
Once a role can open the module, what it shows is filtered per viewer along two dimensions at once: the organization an action affected, and whether the viewer has access to the thing that changed. The governing principle is "if I can do it, I can see it".
Role | What they see |
Admin | Everything in the tenant, across every organization |
Manager | Entries for the organizations they manage |
Custom role with Activity Logs read access | Only entries they have both organization access and module access for |
For a custom role this resolves as follows:
Tenant-wide changes are recorded against All organizations. The role sees one of these entries when it grants read access to the module the change was made in.
Organization and trading party specific changes are recorded against the organization they affected. The role sees one of these entries when it has access to that organization.
Because the Organization column is always populated, an Admin reviewing a user's activity can see both what that user did and which organizations they affected, without cross-referencing another screen.
Searching and Filtering
Filters: Start with a narrow date range (e.g., 7 days) and expand if needed - broad ranges may return large datasets. Add an organization filter to isolate activity in a single unit
Keyword Search: Search by action keyword (e.g., "Approve", "Role", "Retention") rather than only by person for more targeted results
Expand Details: Always click the expand control (▾) to reveal before/after values, which provide critical context for understanding changes
Supported Configurations and Options
Configuration | Detail |
Organization filter | The log can be narrowed to one or more organizations from the Filters panel. The list is searchable, nests sub-organizations under their parent, and offers Select All plus Unassigned, which selects tenant-wide entries |
Date filter | The log can be narrowed to a chosen period from the Filters panel, using a two-calendar Select start and end date dialog |
Keyword search | Free-text search across user names, action types, and event descriptions |
Detail expansion | Before/after value inspection for configuration changes |
Copy support | Log entries can be copied for external use |
Access control | View only for everyone. Of the built-in roles, only Admin and Manager can open the module; anyone else needs a custom role with Activity Logs read permission. Admins see the full tenant, Managers see their managed organizations, and a custom role sees only the entries its organization and module access already covers |
Other Technical Specifications
Parameter | Detail |
Retention | Tied to the tenant's data retention policy |
Export | Manual copy from interface; no built-in bulk export |
Scoping | Applied per viewer at both the organization level and the access level |
Integration Points
All platform modules: Activity Logs capture events from across the entire tenant - document processing, rule configuration, user management, system settings, and API credential management
Compliance reporting: Provides the audit evidence needed for internal reviews, external audits, and regulatory compliance
Troubleshooting: Enables investigation of unexpected outcomes by tracing the sequence of actions and configuration changes that led to the current state
Data retention: Log retention is governed by the tenant's data retention policy set in System Settings
Roles and permissions: Log visibility follows the same read access a role already grants, so widening or narrowing a role changes what that user sees in Activity Logs
Notes
Activity Logs is view only by design: no role, including Admin, can edit or remove an entry
Activity Logs record who, when, what, and which organization was affected - they do not capture full system-level diagnostic traces or performance metrics
Because visibility is access scoped, two users with Activity Logs access looking at the same period can legitimately see different sets of entries. An entry that is absent for one user is not evidence that the action did not happen; confirm coverage with an Admin before concluding anything from an apparent gap
All organizations in the Organization column means the change was tenant-wide, not that it was applied to each organization individually
Log retention is tied to the tenant's data retention policy; for long-term compliance, critical entries should be saved or exported to an internal audit repository
There is no built-in bulk export feature - entries must be copied manually from the interface
Searching with very broad date ranges may return large result sets; start with narrow ranges for faster analysis
Searching by person alone may miss relevant events - combine with action keyword searches for comprehensive results
Before/after values are only available for configuration changes; document lifecycle events show the action but not field-level detail
A rule or instruction that is disabled produces no processing entries, because it is skipped before evaluation. Its absence from a document's trail is expected and is not evidence that processing failed. The act of disabling it is itself recorded as a configuration change, so use the configuration history to find out when it was disabled and by whom.
