The audit log

Autopilot records a tamper-resistant log of every meaningful change happening in your dealership — deal edits, role changes, permission changes, member invites, settings updates. The audit log is the answer to "wait, who did that?".

What gets logged

The two main streams:

Dealership audit log

Captures structural changes, not deal data:

• Member invited / role changed / deactivated / reactivated.
• Custom role created / edited / deleted.
• Permission toggles flipped (per-role, per-field, per-channel).
• Settings changes (deal numbering, branding, alert rules, approval rules, etc.).
• Ownership transferred.
• Custom field added / edited / removed on the deal form.
• Sales channel added / renamed / deleted.

For each entry the log stores who, what, when, and before/after values where applicable.

Deal audit log

Captures every change to every deal:

• Field changes (with before/after values) — sale price, finance status, signatures, sourcing, custom fields, all of it.
• Status transitions (draft → pending → approved → delivered).
• Comments and send-back notes from approval flow.

Both logs are append-only — entries can't be edited or deleted, including by Owners. This is intentional — the whole point of an audit log is that it can't be rewritten after the fact.

Where to read it

Right now, the audit log is surfaced two ways:

• Recent activity on the dashboard — a feed of the latest deal changes across the team. Visible to managers and owners.
• Per-deal history on the deal detail page — every change to that specific deal, in time order with the actor named.

A dedicated full audit-log viewer with search, filters, and CSV export is planned but not shipped yet. If you need to investigate something specific in the meantime, get in touch — we can pull the relevant slice for you.

Common questions the audit log answers

• "Who turned off the cost-price column for salespeople?"
• "When did this deal's finance status change to approved?"
• "Who promoted a salesperson to manager last month?"
• "Did someone change the sale price on this deal after manager approval?"
• "When was this custom role created and by whom?"

Retention

Audit log entries are kept for the lifetime of the dealership. Cancelling your subscription doesn't trigger deletion of the audit log; it's part of the legal record of what happened.

If you delete your account entirely (data export + removal), the audit log entries about your specific actions are anonymised — the change record stays, but it's marked "deleted user" instead of your name.

What's NOT logged

• Read access — the log doesn't capture every page view or report run. That'd be massive and not useful.
• AI Companion conversations — those are processed by Anthropic and not retained. We log a hashed snippet of unsatisfied queries for product feedback, but not the full chat.
• Customer email opens / clicks — those go to the messaging analytics, not the audit log.

For org admins

If you operate multiple dealerships under an org, each dealership has its own audit log. There's no cross-dealership audit view yet — investigation has to be per-dealership for now.