List audit log entries for an application

GET

/api/v1/audit-logs

Authorizations

apiKey

Parameters

Query Parameters

cursor

string

Example

ZGVzY3x1cGRhdGVkQXR8MjAyNi0wNS0xM1QxNjowOToxMi4wMDBafDUwN2YxZjc3YmNmODZjZDc5OTQzOTAxMQ

Opaque cursor from a previous response’s nextCursor. Omit on the first page. Cursors are tied to a sort direction: changing order mid-pagination is rejected.

limit

number

default: 50 >= 1 <= 100

Items per page (1-100). Default 50.

order

string

default: desc

Allowed values: asc desc

Sort direction (with id as tiebreaker). Default desc (newest first). The column being sorted is endpoint-specific. See the individual endpoint docs.

applicationId

required

string

Example

507f1f77bcf86cd799439011

Application ID whose audit log entries (and document audit log entries) you want to list

events

Array<string>

Allowed values: CREATED ONBOARDING_STARTED SUBMITTED APPROVED REJECTED REVIEWER_ASSIGNED REVIEWER_UNASSIGNED NOTE_CREATED NOTE_UPDATED NOTE_DELETED SCREENING_HIT_UPDATED DOCUMENT_UPLOADED DOCUMENT_UPDATED RISK_SCORE_CREATED RISK_SCORE_UPDATED APPLICATION_UPDATED KEY_PERSON_LINKED KEY_PERSON_ROLES_UPDATED KEY_PERSON_UNLINKED ONBOARDING_EMAIL_SENT SUBMITTER_DETAILS_UPDATED APPLICATION_EXPORTED REPORT_EXPORTED ADDITIONAL_INFO_REQUESTED ADDITIONAL_INFO_ANSWERED ADDITIONAL_INFO_REQUEST_CANCELLED APPLICATION_ARCHIVED APPLICATION_RESTORED APPLICATION_HIDDEN APPLICATION_UNHIDDEN DOCUMENT_HIDDEN DOCUMENT_UNHIDDEN PERIODIC_REVIEW_APPROVED PERIODIC_REVIEW_ESCALATED PERIODIC_REVIEW_INITIAL_APPROVAL_SET PERIODIC_REVIEW_DATE_RECOMPUTED PERIODIC_REVIEW_CHANGE_APPROVED PERIODIC_REVIEW_CHANGE_APPLIED PERIODIC_REVIEW_CHANGE_NOT_APPLIED PERIODIC_REVIEW_CHANGE_ESCALATED PERIODIC_REVIEW_CHANGE_ESCALATION_WITHDRAWN PERIODIC_REVIEW_CHANGE_DECISION_UNDONE PERIODIC_REVIEW_CHANGE_REOPENED PERIODIC_REVIEW_CHANGE_REMOVED PERIODIC_REVIEW_APPROVAL_NOTE_EDITED LABEL_ADDED LABEL_REMOVED LABEL_CREATED LABEL_UPDATED LABEL_DELETED SCHEDULE_CREATED SCHEDULE_UPDATED SCHEDULE_PAUSED SCHEDULE_RESUMED TASK_RESOLVED INTERNAL_REVIEW_SETTINGS_SAVED RELEASED_TO_CLIENT WORKFLOW_SETTINGS_UPDATED WORKFLOW_SETTINGS_RESTORED PERIODIC_REVIEW_REQUESTED PERIODIC_REVIEW_REQUEST_SENT PERIODIC_REVIEW_LINK_COPIED PERIODIC_REVIEW_REQUEST_RESENT PERIODIC_REVIEW_REQUEST_NOT_SENT PERIODIC_REVIEW_REMINDER_SENT PERIODIC_REVIEW_SCHEDULE_ESCALATED PERIODIC_REVIEW_CLIENT_STARTED PERIODIC_REVIEW_SUBMITTED PERIODIC_REVIEW_NEW_LINK_SENT PERIODIC_REVIEW_STARTED_BY_STAFF PERIODIC_REVIEW_TAKEN_OVER PERIODIC_REVIEW_ANSWER_ENTERED PERIODIC_REVIEW_HANDED_BACK PERIODIC_REVIEW_SUBMITTED_WITHOUT_DECLARATION

Only these event types. Repeat the parameter for several.

performers

Array<string>

Only entries performed by these actor keys. Repeat the parameter for several.

from

string

Inclusive lower bound on when the event was recorded (ISO 8601).

string

Inclusive upper bound on when the event was recorded (ISO 8601).

search

string

Case-insensitive text search across the event label, structured payload, or legacy note.

excludeHidden

boolean

Exclude hidden entries. Hidden entries are included unless this is true.

Responses

200

application/json

object

items

required

Array<object>

object

required

string

event

required

string

createdAt

required

string format: date-time

performedByName

string

performedById

The acting user’s id. Absent for a row no user performed - an enrichment pass, a cron, a sweep. Returned beside the name because the feed already FILTERS on this id (actor=<userId>), so a consumer could narrow by an id the response never gave them.

string

note

string

hidden

required

Whether the audit log is hidden from the UI

boolean

actor

required

Who performed the event. Applicant names are returned without the tab label.

object

kind

required

string

Allowed values: STAFF APPLICANT SYSTEM UNKNOWN

string

name

string

payload

An extensible display summary of the event. Fields may be added; do not depend on its exact shape.

object

version

required

number

event

required

string

actor

required

object

kind

required

string

Allowed values: STAFF APPLICANT SYSTEM UNKNOWN

string

name

string

subject

object

kind

required

string

label

required

string

changes

required

Array<object>

object

label

Absent on labelless transitions such as the recomputed cycle months.

string

before

object

label

required

string

style

string

Allowed values: TEXT PILL RISK_BAND SUCCESS

severityTier

object

rank

required

Rank of the severity label in the account screening tiers at write time (most-severe first).

number

total

required

How many tiers the source type carried at write time.

number

after

object

label

required

string

style

string

Allowed values: TEXT PILL RISK_BAND SUCCESS

severityTier

object

rank

required

Rank of the severity label in the account screening tiers at write time (most-severe first).

number

total

required

How many tiers the source type carried at write time.

number

chips

required

Array<object>

object

label

required

string

value

string

style

string

Allowed values: TEXT PILL RISK_BAND SUCCESS

pinned

boolean

richBody

string

facts

required

object

key

additional properties

any

provisional

boolean

summary

Collapsed-only summary line (e.g. the changed field labels); the expanded row keeps the full details.

string

nextCursor

required

string

nullable

Examples

{
  "items": [
    {
      "id": "507f1f77bcf86cd799439014",
      "event": "CREATED",
      "createdAt": "2026-03-30T12:00:00.000Z",
      "performedByName": "John Smith",
      "performedById": "60d5ecb54b24003a7c8e92b2",
      "note": "Corporate Onboarding workflow · Requirements not deferred · Welcome email sent",
      "hidden": false,
      "actor": {
        "kind": "STAFF",
        "id": "60d5ecb54b24003a7c8e92b2",
        "name": "John Smith"
      }
    }
  ],
  "nextCursor": "ZGVzY3xjcmVhdGVkQXR8MjAyNi0wNS0xM1QxNjowOToxMi4wMDBafDUwN2YxZjc3YmNmODZjZDc5OTQzOTAxMQ"
}

{
  "items": [
    {
      "id": "507f1f77bcf86cd799439014",
      "event": "CREATED",
      "createdAt": "2026-03-30T12:00:00.000Z",
      "performedByName": "John Smith",
      "performedById": "60d5ecb54b24003a7c8e92b2",
      "note": "Corporate Onboarding workflow · Requirements not deferred · Welcome email sent",
      "hidden": false,
      "actor": {
        "kind": "STAFF",
        "id": "string",
        "name": "string"
      },
      "payload": {
        "version": 1,
        "event": "CREATED",
        "actor": {
          "kind": "STAFF",
          "id": "string",
          "name": "string"
        },
        "subject": {
          "kind": "string",
          "label": "string",
          "id": "string"
        },
        "changes": [
          {
            "label": "string",
            "before": {
              "label": "string",
              "style": "TEXT",
              "severityTier": {
                "rank": 0,
                "total": 0
              }
            },
            "after": {
              "label": "string",
              "style": "TEXT",
              "severityTier": {
                "rank": 0,
                "total": 0
              }
            }
          }
        ],
        "chips": [
          {
            "label": "string",
            "value": "string",
            "style": "TEXT",
            "pinned": false
          }
        ],
        "richBody": "string",
        "facts": {},
        "provisional": false,
        "summary": "string"
      }
    }
  ],
  "nextCursor": "ZGVzY3xjcmVhdGVkQXR8MjAyNi0wNS0xM1QxNjowOToxMi4wMDBafDUwN2YxZjc3YmNmODZjZDc5OTQzOTAxMQ"
}