Audit Log — Full Activity History
Every significant action on the platform is recorded in an append-only audit log. Entries are never modified or deleted within your plan's retention window — giving you a trustworthy history for compliance audits, incident investigations, and team accountability.
What is logged
Experiment transitions
Every state change — who triggered it, when, and why.
Approval decisions
Approve/reject decisions with the reviewer's identity.
Budget events
Reservations, settlements, alerts, and budget exhaustion events.
Agent events
Health check failures, status changes, and execution starts.
Credential access
Every decryption of a credential — with the requesting agent and experiment.
Team changes
Member invitations, role changes, and token creation/revocation.
Accessing the audit log
View in the app at /audit, or query via API with filtering:
# All audit entries
GET https://fleetq.169.58.89.204.sslip.io/api/v1/audit
# Filter by event type and date range
GET https://fleetq.169.58.89.204.sslip.io/api/v1/audit?event=experiment.transitioned&from=2026-01-01&to=2026-01-31
# Filter by actor (user ID)
GET https://fleetq.169.58.89.204.sslip.io/api/v1/audit?actor_id=01jf4a2b-...Retention periods
The audit:cleanup command runs daily at 02:00
and removes entries older than your plan's retention window:
| Plan | Retention |
|---|---|
| Free | 7 days |
| Starter | 30 days |
| Pro | 90 days |
| Enterprise | 365 days (custom unlimited available) |
Compliance use cases
- SOC 2: Evidence that access to credentials and data is logged and attributable
- GDPR: Track who accessed data, when, and for what purpose
- Internal audits: Investigate why an experiment ran, who approved it, and what it cost
- Incident response: Reconstruct the exact sequence of events around a failure or security incident