Audit Logs

Audit logs provide an immutable record of every action taken in your organization — who changed what, when, and from which state.

Audit logs are available on the Team plan and above.

What's logged

Flag events

Event	Description
`CREATED`	A feature flag was created
`UPDATED`	A feature flag's name or key was changed
`DELETED`	A feature flag was permanently deleted
`ARCHIVED`	A feature flag was archived
`UNARCHIVED`	An archived flag was restored
`TOGGLED`	A flag was enabled or disabled in an environment

API key events

Event	Description
`CREATED`	A new API key was generated
`REVOKED`	An API key was revoked

Team events

Event	Description
`INVITED`	A member invitation was sent
`ACCEPTED`	An invitation was accepted
`CANCELLED`	A pending invitation was cancelled

Subscription events

Event	Description
`PLAN_CHANGED`	The organization's plan was upgraded or downgraded
`GRACE_PERIOD_STARTED`	Evaluation usage exceeded the plan limit; grace period began

Usage events

Event	Description
`LIMIT_WARNING`	Evaluation usage reached 80% of the plan limit
`LIMIT_EXCEEDED`	Evaluation usage reached 100% of the plan limit
`HARD_OVERAGE_REACHED`	Evaluation usage reached 110% of the plan limit; evaluations are now blocked
`EVALUATION_BLOCKED`	An evaluation was rejected due to plan limit overage

Entity types

Audit entries are associated with one of the following entity types:

FEATURE_FLAG, FLAG_ENVIRONMENT, FLAG_RULE, PROJECT, ENVIRONMENT, API_KEY, SEGMENT, INVITATION, SUBSCRIPTION

Example audit log entry

{
  "id": "a1b2c3d4-e5f6-...",
  "action": "TOGGLED",
  "entityType": "FLAG_ENVIRONMENT",
  "entityId": "f9e8d7c6-...",
  "userEmail": "[email protected]",
  "payload": {
    "flagKey": "new-checkout",
    "environment": "production",
    "enabled": false
  },
  "createdAt": "2026-03-10T02:14:33Z"
}

Filtering

Use the filter bar to narrow logs by:

Action — e.g. show only TOGGLED events
Entity type — e.g. show only FEATURE_FLAG events
Date range — filter by start and end date

Retention

Audit logs are append-only and cannot be modified or deleted.

Use cases

Post-mortem: "Who enabled that flag at 2am?" — filter by entity type FLAG_ENVIRONMENT and date range.

Compliance: Demonstrate change control to auditors by exporting the log for a given period.

Onboarding: New team members can review the history of changes to understand the current flag configuration.

Was this helpful?