Docs/Audit/Audit Trail Overview — SanadiqCloud

Audit Trail Overview — SanadiqCloud

Product version: 1.0.0+1
Last updated: 2026-10-02
Audience: Tenant Owners, Tenant Employees, and other organization members with audit:read

A. What Is the Audit Trail?

Important actions in your organization are recorded as audit log entries. Each entry attributes an action to an actor, a target resource, and the time the action happened.

Scope Who uses it What you see
Organization audit Members with audit:read in the current organization Events for this organization only

Entries are append-only and read-only. Nobody can edit or delete audit rows from the app.

Phase 6 — Security & Audit Trail Organization Audit Logs, Role Governance & Activity Tracking

Learn how SanadiqCloud records an append-only audit trail across catalog, inventory, sales, finance, billing, media, and support access events, and how to filter and inspect change details.

B. What Gets Logged?

Entries are created automatically from activity in other parts of SanadiqCloud. Categories recorded for your organization:

Category Examples
Products Create, update, delete products, items, brands, categories, manufacturers, variations; price changes
Inventory Warehouses, stock items, transactions, adjustments, transfers, pick lists, customer returns, suppliers
Sales Customers, sales, sales invoices, payments, returns, refunds
Finance Journals posted, cash transfers, expenses, other revenue, fiscal year close
Billing Subscription and payment events for your organization (when the event carries your organization)
Media Uploads and deletes
Support Support cases, replies, attachments, and support access requests, grants, rejections, and ends

Sign-in, role and permission changes, and organization create/update/delete are recorded at platform scope and do not appear in organization audit.

Each entry can include: action, description, actor (name / email / role when available), entity type and id, occurred time, IP / user agent, changed fields, and technical before/after data when present.

Support access entries

When a platform support agent works in your organization under an approved support access grant, the entries they create show a Support access badge. The actor is still the agent. An entry written before the grant reached the audit trail may not carry the badge.

C. Access

Permission Use
audit:read Open the Audit area, list, and detail
Tenant Owners usually have audit access by default. Other roles need the permission granted by an owner or admin of the organization. Platform staff can open an organization's audit only while they hold an active support access grant for it.

D. Navigation

  1. Side rail Audit — opens the log list at /audit/logs.
  2. Audit logs at /audit/logs.
  3. Open a row → /audit/logs/detail/:id. The app loads the entry by id (deep links work after refresh).

E. Retention

Audit logs are retained for 30 days by default. Older entries are automatically purged. Contact support if you need specific audit history that is no longer available in the app.

Next: Audit Logs