DocsWhat an app can do

The journal

A record of every change and every sign in: who, when, from where, and each field before and after.

The journal answers "who changed this, and when?". It is one list in your app, with one line per change, and it cannot be edited by anyone, admins included.

What a line holds#

  • Who: the account that made the change, with its name and email.
  • When, and from where: the internet address and the browser or device.
  • What: the kind of record, the record itself by its name, and the action (created, changed, deleted).
  • The change: for an edit, each field that changed, with its value before and after. For a new or deleted record, its fields.
  • How: through a screen, through a group of changes sent together, or through an AI connected to the app. A change made by your own AI is marked as such. See Connect your AI.

A line is written only once the change is saved. A change the server refused leaves no line.

Sign ins#

The journal can also record each sign in (with its method and device, for example "password · Firefox · macOS") and each refused attempt (with the identifier that was typed). Passwords and session keys are never written.

Your own actions#

The app can add a line for its own actions: an invoice mailed, an export made. Ask for it when you want a trace of an action that changes no record.

Reading the journal#

  • The whole journal is a list like any other: search on the person and the record, filters on the action and the kind of record, export.
  • Each record page can show its own history: who, when, and a table of field, before and after.
  • Who can read the journal is a rule of your app. For example, admins only. It is never open to everyone, because it holds every account's activity.

What it does not record#

Changes made by the app's own automations (a scheduled task, a value computed on save) leave no line by default: the line belongs to the person or the AI whose action started them.

This page as markdown