Every action in your shop — an invoice created, a payment refunded, a setting changed — gets logged, and you can review it from Settings. Open Settings and look for the Audit & activity tile; it lives in the Admin group of tiles, alongside Team & Permissions, Plans & Billing, API Keys, and Data Export, and it takes you to `/app/settings/audit`. This used to be two separate pages — one for the security trail, one for business events — and it's now a single page with two tabs.
Two tabs, one page
The tabs are Activity audit (the default) and Activity log. Whichever one you're on is written into the URL as `?tab=trail` or `?tab=activity`, so you can bookmark or share a link straight to either view and it'll open on the right tab. If you had the old `/app/settings/audit-log` URL saved from before, it still works — it now redirects you straight to the Activity log tab instead of breaking.
Activity audit tab — the security trail
This tab is the cross-cutting record of sign-ins, settings changes, and other admin-grade actions — "who, what, when, with the metadata captured at the time," as the page describes it, meant to mirror what SalesThumb HQ sees when helping you with support. Each row shows a relative time ("3h ago") plus the exact timestamp, the actor's name and email, a color-coded action pill (green for CREATE, blue for UPDATE, rose for DELETE/REMOVE/REFUND, amber for SET/RESCHEDULE, teal for RECORD, violet for SEND), the affected table and a truncated record ID, and — when there's metadata attached — a "N keys" toggle you click to expand the raw JSON.
You can filter by actor, by a specific action (the dropdown is populated from actions actually present in your log, not a fixed list), and by time window: last 7, 30, or 90 days, or all time. One thing to watch — the window defaults to Last 30 days every time you land on this tab, not all time. If you're hunting for something older, you have to switch the Window filter yourself or you'll come up empty-handed. Export CSV on this tab pulls every row matching your current filters, not just the page you're looking at — it fetches in batches of 200 behind the scenes, so a long history can take a few seconds before the download actually starts.
Activity log tab — the business-event feed
This tab is the richer, day-to-day feed: changes to customers, vehicles, invoices, quotes, appointments, payments, refunds, and warranties, plus shop settings — "who did what, when, and the before/after." At the top are four 30-day stats: total events and active users, invoice changes, customer changes, and payment events. Below that you can search by description, label, action, or user text, and narrow further by actor, by action group (invoice, quote, customer, appointment, payment, Stripe, or warranty changes — these are broad categories, not exact action names), and by entity type. Each event shows the actor, a short description, the affected record, a colored badge, and an expandable "Show metadata" link; when an event is tied to a specific invoice, quote, customer, or appointment, an "Open →" link jumps straight to that record.
Export CSV here works differently from the audit tab — it's a direct download link that carries your current search, actor, action, and entity filters as URL parameters, rather than looping through pages client-side. The page notes this data is retained for 7 years.
Who can actually see this
Both tabs are gated the same way: owners, admins, and managers can view them; installers and front-desk staff cannot. Anyone without access who loads the page gets a plain "Audit log is restricted to owners, admins, and managers" message instead of any data — there's no partial view. Note that this page doesn't manage those roles itself — it's a read-only window into your shop's two logs. To change what a team member can see or do, that's done from the separate Team & Permissions settings, not from Audit & activity.