Activity logs record what happens in your workspace: who signed in, what changed, and when. You rarely need them, but when a question comes up they give you a clear, factual answer.
What the logs capture
The platform keeps a record of meaningful actions. Depending on your plan, this typically includes sign-ins, changes to records such as matters and invoices, updates to settings, and administrative changes like adjusting a person's access. Each entry notes who did it, what they did, and when. It is an audit history you can check when needed, not something you monitor every day.
When you would look
- A record changed unexpectedly and you want to understand who edited it and when.
- You are checking that a recent sign-in was really you or a colleague, not someone else.
- An administrator is reviewing account security after a lost device or a suspicious message.
- You need to confirm that a setting was updated, and by whom, during a busy setup week.
Reading a log entry
- Open the activity or audit area. This usually lives in the administrative or reporting part of your settings and is available to administrators.
- Narrow it down. Filter by person, by date range, or by the type of action, so you are not scrolling through everything at once.
- Read the entry. Each line tells you who acted, what they did, and when. Together, several entries often tell a small story that answers your question.
Logs are most useful when each person has their own account. Shared logins turn every entry into "someone", which defeats the purpose. This is one more reason individual accounts are worth the small extra effort.
Signs worth a second look
You are not expected to police the logs, but a few patterns deserve attention if you happen to notice them. A sign-in at an unusual hour or from an unexpected place, a burst of changes nobody remembers making, or a person accessing an area far outside their normal work can all be worth a calm question. Most of the time there is a simple explanation. Occasionally there is not, and catching it early matters.
If you ever suspect an account has been misused, the activity log is the first place to look. Reviewing it before you react tells you what actually happened, so you respond to facts rather than fear.