Audit Log
The record of what happened to this client’s data, and who saw it.
Who Can See It
Section titled “Who Can See It”What you see depends on your roles. The page is in the sidebar for a User and an Administrator, once a client is selected in the client switcher; until then it is hidden.
| Role | What it reaches |
|---|---|
| User | The Changes tab for this client’s records |
| Administrator | The Changes tab for system records: users, groups, clients and the license |
| Superadmin | Everything above, plus the PHI Access and Audit Access tabs |
On the Changes and Audit Access tabs, the Scope filter picks Client (this client’s records) or System (users, groups, clients and the license). An account with both User and Administrator can switch between them; an Administrator alone sees System only.
The Tabs
Section titled “The Tabs”| Tab | What it holds |
|---|---|
| Changes | Every insert, update and delete, with the before and after |
| PHI Access | Who read patient data. Superadmin only |
| Audit Access | Who read the audit log itself, including who exported it. Superadmin only |
Exporting
Section titled “Exporting”Export, in the Table actions menu of each tab’s toolbar, downloads what that tab currently shows, filters included, as a CSV file with the newest entry first. It is greyed while the tab is loading and when the tab has no rows, saying there are no entries to export. Exporting a log is itself recorded on the Audit Access tab, as its own row naming the log that was exported. Reading or exporting System changes is recorded there too, under the System scope.
Changes
Section titled “Changes”| Column | What it shows |
|---|---|
| ID | The entry |
| When | The moment it happened |
| User | Who did it, or System for an automatic change or a change a task made |
| Via | The task that made the change, with who started it, such as “Import Data · visits.csv (alice@example.com)”. A System change shows the client and the task. A dash for a change made directly |
| Action | Created, Updated or Deleted |
| Table | What kind of record |
| Record ID | Which one |
| Change | The fields that moved. A Social Security number or provider tax ID shows only its last four digits |
On a narrow window, Record ID folds under Table as “Record 1207”. Via is also in a record’s change history and in the exported CSV.
The When filter starts at the last 7 days. Once you narrow by User or Table, it widens to All dates unless you pick a range.
Besides Scope and When, the filters are User, Table and, once a table is picked, Record ID.
Crosswalk changes are recorded entry by entry: saving a crosswalk writes a row only for each entry that changed, so an unchanged entry keeps its history.
PHI Access
Section titled “PHI Access”| Column | What it shows |
|---|---|
| ID | The entry |
| When | The moment it happened |
| User | Who read the data |
| Action | View, List or Export |
| Table | What kind of record |
| Record ID | Which one, folded under Table on a narrow window |
| Path | The address of the request that read it |
The filters are When, User, Table, Record ID and Action. On a patient’s page, a Superadmin’s Who Viewed This Patient opens this tab filtered to that patient.
Audit Access
Section titled “Audit Access”| Column | What it shows |
|---|---|
| ID | The entry |
| When | The moment it happened |
| User | Who read the audit log |
| Rows | How many entries they read |
| Query | The filters they read it with |
The filters are Scope, When and User.
States
Section titled “States”- No changes in the last 7 days. on the default window, which counts back from today in your practice time zone.
- No events match these filters once narrowed.
Related: Users · Roles and Access