---
title: "Security activity log"
description: "Review recorded security changes and who performed them."
source: "https://docs.aplt.ai/docs/organisation-security-activity"
updated: "2026-10-19T23:23:54.94535+00:00"
product: Autopilot
content_type: documentation
---

# Security activity log

Review recorded security changes and who performed them.

Organisation administrators can review recorded security changes across their organisation and its linked dealerships. Open **Organisation → Security → Security activity log**.

## Review recorded activity

The log shows the newest activity first. Each entry includes its time, the activity, who performed it and its scope. Times are labelled **NZ** and use New Zealand time.

Open an activity to inspect its details. The information available depends on the recorded event.

## Filter by activity and period

Use **Activity** to select:

- **All activity**
- **Member access**
- **Security policies**
- **Roles & permissions**
- **Invitations**
- **Session sign-outs**

Use **Period** to choose **Last 30 days**, **Last 90 days** or **Last 12 months**.

## Search people or dealerships

Enter a name or dealership in **Search people or dealerships…**. Search covers all recorded history and activity types, so the Activity and Period filters are unavailable while a search is entered.

Clear the search to use those filters again. Use **Reset filters** to return to the default view, or **Newest matches** when reviewing older results.

## Use the history to follow up

Review policy changes after adjusting network or authentication settings. Review member-access changes after a suspension or offboarding, and session sign-outs after ending someone’s browser sessions.

The log is a history of recorded security events, rather than a list of all browsing activity or individual live sessions. Use [Active sessions](/docs/organisation-active-sessions/) for member sign-out actions and [Offboarding](/docs/organisation-offboarding/) to change access.