What the audit log records
Every access to a document, who by, and what is deliberately not recorded.
Every meaningful action is recorded: sign-ins, document views and downloads, faxes sent and received, secure links created, opened and revoked, role changes, settings changes, and API requests that were denied.
Each entry holds who acted, what they acted on, when, and from what address.
What is deliberately not recorded
Document content, filenames or clinical detail. The audit log is reviewed by people who need to know that a record was accessed, not what it said. Metadata that would carry clinical content is rejected when an event is written rather than filtered when it is read — a validation error in the writer is better than discovering years of logs contain patient names.
What it is for
Two things. Answering "who looked at this record?" during a review, and noticing a pattern nobody asked about — an account reading documents it has no reason to read.
Retention
Audit entries are retained for your organization's configured period, which defaults to seven years. They are not deleted when a document is deleted; the record that it existed and was accessed outlives the document itself.
This is about /app/compliance in the application. You will need to be signed in.
Last reviewed 2026-10-28. Help articles live in the VitalFax repository and are changed alongside the behaviour they describe, so an article and the product cannot drift apart unnoticed.