Observer records an audit log entry for every create, update, and delete operation on case data. Audit logs are append-only — they cannot be edited or deleted.

What Gets Logged

CategoryOperations logged
PeopleCreate, update, delete person records
Support recordsCreate, update, delete consultations
Migration recordsCreate, update, delete movement records
HouseholdsCreate, update, delete household and member records
NotesCreate, update, delete case notes
DocumentsUpload, update metadata, delete documents
PetsCreate, update, delete pet records
PermissionsAssign, update, revoke project permissions
Admin — UsersCreate user, reset password
Admin — PermissionsUpdate project permission

Authentication events (login, logout, token refresh) are not in the project audit log — they appear in server logs.

Viewing the Audit Log

Only project managers and owners can access the audit log.

GET /projects/:project_id/audit?page=1&per_page=50
ParameterDescription
pagePage number (default 1)
per_pageResults per page (default 50)
actor_idFilter by user who made the change
startFilter by date (YYYY-MM-DD)
endFilter by date (YYYY-MM-DD)

Response format

Each audit entry contains:

{
  "id": "01J...",
  "project_id": "01J...",
  "actor_id": "01J...",
  "actor_ip": "192.168.1.1",
  "action": "create",
  "entity_type": "person",
  "entity_id": "01J...",
  "created_at": "2024-06-15T10:30:00Z"
}
FieldDescription
actor_idUser who performed the action
actor_ipIP address of the request
actioncreate, update, or delete
entity_typeRecord type (person, support_record, note, etc.)
entity_idULID of the affected record

Audit in the Web Interface

  1. Open a project
  2. Click Audit Log in the navigation
  3. Filter by date range or user
Audit log access requires the manager or owner project role. Consultants and viewers cannot see the audit log.