The audit log is available to any users with the “Account Admin” permission set.
Overview
Use the audit log to view and filter important UpGuard events and see who performed them. Events are ordered by time with the newest events appearing first.
The audit log shows events from the last 90 days by default, but you can use the custom range filter to see up to 18 months of data.
💡Want to see more than 18 months of data? Export your audit log to view your full history.
Filter the audit log
-
Click the Apply filters button in the top right corner of your screen.
- A panel will slide out from the right side of your screen and allow you to filter by time, event, API key and user.
- Click Apply to filter the view.
🧠 Use the search bar below the Apply filters button to search the table.
Tracked events
The following events are captured in UpGuard’s audit log:
| Event | Related to |
| Additional evidence added | Vendor Risk |
| Additional evidence created from source document | Vendor Risk |
| Additional evidence deleted | Vendor Risk |
| Additional evidence risk modified | Vendor Risk |
| Additional evidence types updated | Vendor Risk |
| Additional evidence updated | Vendor Risk |
| Vendors added (bulk) | Vendor Risk |
| Vendor attributes set (bulk) | Vendor Risk |
| Vendor labels changed (bulk) | Vendor Risk |
| Vendor portfolios set (bulk) | Vendor Risk |
| Vendor tier set (bulk) | Vendor Risk |
| Security and privacy page added | Vendor Risk |
| Security and privacy page deleted | Vendor Risk |
| Security and privacy page updated | Vendor Risk |
| Vendor management requested | Vendor Risk |
| Vendor management modified | Vendor Risk |
| Vendor management removed | Vendor Risk |
| Public risk waiver accepted | Vendor Risk |
| Public risk waiver ignored | Vendor Risk |
| Relationship questionnaire sent | Vendor Risk |
| Vendor Risk assessment created | Vendor Risk |
| Vendor Risk assessment deleted | Vendor Risk |
| Vendor Risk assessment published | Vendor Risk |
| Vendor Risk assessment restored | Vendor Risk |
| A collaborator was added to a questionnaire | Vendor Risk |
| Questionnaire sent | Vendor Risk |
| Questionnaire included for vendor scoring | Vendor Risk |
| Questionnaire status changed | Vendor Risk |
| Vendor added | Vendor Risk |
| Vendor attribute definitions updated | Vendor Risk |
| Vendor attributes updated | Vendor Risk |
| Onboarding request finalized | Vendor Risk |
| Vendor labels changed | Vendor Risk |
| Vendor note applied | Vendor Risk |
| Vendor portfolios changed | Vendor Risk |
| Vendor removed | Vendor Risk |
| Vendor contact added | Vendor Risk |
| Vendor created | Vendor Risk |
| Vendor document added | Vendor Risk |
| Questionnaire template deleted | Vendor Risk |
| Questionnaire template enabled/disabled | Vendor Risk |
| Enabled/disabled relationship automation recipe | Vendor Risk |
| Questionnaire template published | Vendor Risk |
| Relationship questionnaire template updated | Vendor Risk |
| Vendor remediation created | Vendor Risk |
| Vendor remediation risks edited | Vendor Risk |
| Vendor remediation risks marked as remediated | Vendor Risk |
| Vendor remediation status changed | Vendor Risk |
| Vendor remediation title changed | Vendor Risk |
| Vendor contact deleted | Vendor Risk |
| Vendor document deleted | Vendor Risk |
| Vendor Risk modification added | Vendor Risk |
| Vendor Risk modification approval | Vendor Risk |
| Vendor Risk modification deleted | Vendor Risk |
| Vendor Risk modification updated | Vendor Risk |
| Vendor tier set | Vendor Risk |
| Vendor tier definitions updated | Vendor Risk |
| Approver nominated | Vendor Risk, Breach Risk |
| Approver removed | Vendor Risk, Breach Risk |
| IP labelled | Vendor Risk, Breach Risk |
| Portfolio created | Vendor Risk, Breach Risk |
| Portfolio deleted | Vendor Risk, Breach Risk |
| Portfolio updated | Vendor Risk, Breach Risk |
| Domain labelled | Vendor Risk, Breach Risk |
| Domain portfolios changed | Vendor Risk, Breach Risk |
| Threat Monitoring organisation config changed | Breach Risk |
| Threat closed as remediated | Breach Risk |
| Threat status changed | Breach Risk |
| Self remediation created | Breach Risk |
| Self remediation risks edited | Breach Risk |
| Self remediation status changed | Breach Risk |
| Self remediation title changed | Breach Risk |
| Breach Risk risk waiver created | Breach Risk |
| Breach Risk risk waiver deleted | Breach Risk |
| Breach Risk risk waiver changed | Breach Risk |
| Remediation for subsidiary created | Breach Risk |
| Remediation risks for subsidiary edited | Breach Risk |
| Remediation for subsidiary status changed | Breach Risk |
| Remediation title for subsidiary changed | Breach Risk |
| Threat Monitoring setup requested | Breach Risk |
| Transform added | Breach Risk |
| Transform unmonitored | Breach Risk |
| Transform updated | Breach Risk |
| Transform Monitoring restarted | Breach Risk |
| Custom domain added | Breach Risk |
| Custom domain removed | Breach Risk |
| Custom IP address added | Breach Risk |
| Custom IP address removed | Breach Risk |
| Custom IP range added | Breach Risk |
| Custom IP range removed | Breach Risk |
| Data leaks finding published | Breach Risk |
| Identity breach comment added | Breach Risk |
| Identity breach user assigned | Breach Risk |
| Identity breach user unassigned | Breach Risk |
| Multiple domains labelled | Breach Risk |
| Multiple IPs labelled | Breach Risk |
| Subsidiary labels changed | Breach Risk |
| Subsidiary risk waiver added | Breach Risk |
| Subsidiary risk waiver approval | Breach Risk |
| Subsidiary risk waiver deleted | Breach Risk |
| Subsidiary risk waiver updated | Breach Risk |
| API key generated | Platform |
| API key deleted | Platform |
| API key retrieved | Platform |
| Bulk hostnames reregistered | Platform |
| Bulk hostnames registered | Platform |
| Custom email address details removed | Platform |
| Custom email address details updated | Platform |
| Flag changed | Platform |
| Integration created | Platform |
| Integration deleted | Platform |
| Integration disabled | Platform |
| Integration enabled | Platform |
| Logo changed | Platform |
| Logo deleted | Platform |
| MFA settings have been updated | Platform |
| Minimal role changed | Platform |
| Report generated | Platform |
| Report pending | Platform |
| Report transmission failed | Platform |
| Scheduled report created | Platform |
| Scheduled report deleted | Platform |
| Scheduled report modified | Platform |
| UpGuard employee logged in | Platform |
| User added | Platform |
| User invited | Platform |
| User logged in | Platform |
| User removed | Platform |
| Workflow activated | Risk Automations |
| Workflow archived | Risk Automations |
| Workflow created | Risk Automations |
| Workflow credential created | Risk Automations |
| Workflow credential updated | Risk Automations |
| Workflow Updated | Risk Automations |
| Trust Center access granted | Trust Exchange |
| Trust Center user invited | Trust Exchange |
| Trust Center access denied | Trust Exchange |
| Trust Center asset access updated | Trust Exchange |
| Trust Center asset added | Trust Exchange |
| Trust Center asset published | Trust Exchange |
| Trust Center asset removed | Trust Exchange |
| Trust Center asset retracted | Trust Exchange |
| Trust Center asset updated | Trust Exchange |
| Security and privacy pages updated | Trust Exchange |
| Trust Center NDA manually approved | Trust Exchange |
| Trust Center fields updated | Trust Exchange |
| Trust Center NDA access revoked | Trust Exchange |
| Trust Center settings changed | Trust Exchange |
| Trust Center custom domain added | Trust Exchange |
| Trust Center custom domain removed | Trust Exchange |
| Trust Center Security Profile check(s) removed | Trust Exchange |
| Trust Center Security Profile published | Trust Exchange |
| Trust Center update added | Trust Exchange |
| Trust Center update removed | Trust Exchange |
| Trust Center update modified | Trust Exchange |
| Trust Center created | Trust Exchange |
| Trust Center deleted | Trust Exchange |
| User Risk App Details Updated | User Risk |
| User Risk remediation request created | User Risk |
| User Risk remediation status changed | User Risk |
| User Risk app approval changed | User Risk |
| User Risk risk waiver created | User Risk |
| User Risk risk waiver deleted | User Risk |
| User roles changed | User Risk |
| User signed up | User Risk |
🎵 If your account uses SSO-based login, then inviting a user to your account will record a "User Added" event rather than a "User Invited" event.