Audit Logs

A complete, searchable record of every action taken in your account — built for compliance, security, and accountability.

Overview

LinkTime's audit log records every significant action in your account — bookings created, settings changed, team members added, integrations connected, and more. This gives you a tamper-proof timeline of who did what and when, which is essential for:

  • Compliance reporting — SOC 2, GDPR, and internal audit requirements
  • Security investigations — trace suspicious activity back to a specific action and IP address
  • Team accountability — see which admin changed a setting or removed a member
  • Debugging — understand the sequence of events leading to unexpected behavior

Zero impact on performance — Audit logging is fire-and-forget. It never blocks or slows down your bookings, API calls, or other operations. If the logging system has a transient error, your business logic continues unaffected.

Accessing Your Audit Log

Your audit log is available in the dashboard under Settings → Audit Log:

  1. 1Go to your Dashboard
  2. 2In the left sidebar, look under the Settings section
  3. 3Click Audit Log (shield icon)

The audit log page shows a chronological table of all actions, with the most recent events at the top. You can filter, search, and export the data from this page.

What Gets Logged

Every auditable action is logged with a timestamp, the acting user, and relevant context. Here is the complete list of tracked actions:

CategoryActionDisplay Label
Bookingsbooking.createdBooking Created
booking.cancelledBooking Cancelled
booking.rescheduledBooking Rescheduled
Event Typesevent_type.createdEvent Type Created
event_type.updatedEvent Type Updated
event_type.deletedEvent Type Deleted
Team & Organizationteam.createdTeam Created
team.member_addedTeam Member Added
team.member_removedTeam Member Removed
org.member_invitedMember Invited
org.member_removedMember Removed
org.role_changedRole Changed
Integrationsintegration.connectedIntegration Connected
integration.disconnectedIntegration Disconnected
api_key.createdAPI Key Created
api_key.deletedAPI Key Deleted
Workflowsworkflow.createdWorkflow Created
workflow.updatedWorkflow Updated
workflow.deletedWorkflow Deleted
Voice Agentsvoice_agent.createdVoice Agent Created
voice_agent.updatedVoice Agent Updated
voice_agent.deletedVoice Agent Deleted
Paymentspayment.receivedPayment Received
payment.refundedPayment Refunded
Settingssettings.updatedSettings Updated
Authenticationauth.loginSigned In

Understanding Log Details

Each audit log entry contains structured details depending on the action type. This makes entries easy to read and search:

Booking Actions

Shows the invitee's email, event type name, and start time:

{ "inviteeEmail": "[email protected]", "eventType": "30 Minute Meeting", "startTime": "2026-02-15T14:00:00Z" }

Integration Actions

Shows which service was connected or disconnected:

{ "service": "google_calendar" }

Team & Organization Actions

Shows the affected member, their role, and any role changes:

{ "memberEmail": "[email protected]", "role": "ADMIN", "previousRole": "MEMBER" }

Settings Actions

Shows which setting was changed, with before/after values:

{ "field": "timezone", "oldValue": "America/New_York", "newValue": "Europe/London" }

Resource Actions (Events, Workflows, Voice Agents)

Shows the resource name:

{ "name": "Discovery Call" }

Filtering & Searching

The audit log supports two ways to narrow down entries:

Category Filter

Use the dropdown at the top of the audit log page to filter by category. Available categories:

All Actions
Bookings
Events
Team
Settings
Integrations
Workflows
Payments
Voice

Text Search

Type in the search box and press Enter to find entries matching a keyword. Search looks across the action name, resource type, and resource ID. For example, searching “zoom” would find integration connect/disconnect events for Zoom.

CSV Export

Click the Export CSV button to download your audit log as a CSV file. The export includes all entries matching your current filters (category and search). The CSV contains:

  • Time — ISO 8601 timestamp of the action
  • Action — Human-readable action label (e.g., “Booking Created”)
  • Resource — The type of resource affected (e.g., “booking”, “event_type”)
  • Resource ID — The unique identifier of the affected resource
  • Details — JSON-encoded context (invitee email, service name, etc.)
  • IP Address — Masked or full depending on your plan

The filename is auto-generated with the current date, e.g., audit-log-2026-02-12.csv.

Retention by Plan

Audit log retention varies by plan. You'll only see entries within your plan's retention window:

PlanRetentionUse Case
Free7 daysRecent activity awareness
Pro90 daysQuarterly review and basic compliance
Business365 daysFull annual audit trail for enterprise compliance

Note: Entries older than your retention window are not deleted immediately — they are simply hidden from view. A daily cleanup process permanently removes entries older than 365 days (the maximum retention for any plan).

IP Address & Privacy

LinkTime records the IP address associated with each action for security purposes. How the IP is displayed depends on your plan:

PlanIP DisplayExample
Free / ProMasked (last octet hidden)192.168.1.xxx
BusinessFull IP address192.168.1.42

This aligns with the GDPR data minimization principle — IP addresses are only fully visible when the plan specifically calls for full audit capabilities. For IPv6 addresses, the last segment is masked (e.g., 2001:db8::1234:xxxx).

Organization Audit Log

If you're part of an organization, admins have access to a separate organization-wide audit log that shows actions from all members. This is essential for team oversight and compliance.

Location: Dashboard → Organization → Audit Log
Access: Only OWNER and ADMIN roles can view the org audit log
User column: Each entry shows the member who performed the action (name, email, avatar)
Same features: Category filters, text search, CSV export, and pagination all work the same as the personal audit log

API Access

You can query the audit log programmatically via the REST API. Authentication is required.

Personal Audit Log

# List audit logs with pagination
GET /api/audit-logs?page=1&limit=50
# Filter by category
GET /api/audit-logs?category=bookings
# Text search
GET /api/audit-logs?search=zoom
# Export as CSV
GET /api/audit-logs?export=csv
# Combine filters
GET /api/audit-logs?category=integrations&search=hubspot&page=1&limit=25

Response Format

{ "logs": [ { "id": "clx...", "action": "booking.created", "actionLabel": "Booking Created", "resource": "booking", "resourceId": "booking-abc123", "details": { "inviteeEmail": "[email protected]", "eventType": "30 Minute Meeting" }, "ipAddress": "192.168.1.xxx", "createdAt": "2026-02-12T10:30:00.000Z" } ], "total": 142, "page": 1, "limit": 50, "hasMore": true, "retentionDays": 90 }

Query Parameters

ParameterTypeDefaultDescription
pagenumber1Page number (1-indexed)
limitnumber50Results per page (max 100)
categorystringallFilter: all, bookings, events, team, settings, integrations, workflows, payments, voice
searchstringText search across action, resource, and resource ID
exportstringSet to “csv” to download as CSV file

Organization Audit Log API

# Requires OWNER or ADMIN role
GET /api/organizations/{orgId}/audit-logs?page=1&limit=50

Same query parameters as the personal audit log. Response includes an additional user object (name, email, image) on each log entry.

Data Cleanup

A daily automated process permanently deletes audit log entries older than 365 days. This provides defense-in-depth — even if the API-level retention filter has an issue, the cleanup ensures no data persists beyond the maximum retention window.

Each audit log entry stores the user's plan at the time the action occurred (planAtTime). This is a defense-in-depth measure — it allows verification even if a user's plan changes later.

FAQ

Can audit logging slow down my bookings?

No. Audit logging is fire-and-forget — it runs in the background and never blocks or delays your business logic. Even if the audit system experiences a transient error, your bookings, API calls, and other operations continue normally.

Can I delete specific audit log entries?

No. Audit logs are append-only and cannot be selectively deleted. This is by design — a tamper-proof audit trail is essential for compliance. Entries are automatically cleaned up after they exceed the maximum retention period (365 days).

What happens when I upgrade or downgrade my plan?

Your retention window adjusts immediately. Upgrading from Free to Pro instantly reveals up to 90 days of history (if entries exist). Downgrading hides older entries from view but does not delete them — if you upgrade again, they reappear.

Are webhook deliveries logged?

Webhook deliveries themselves are not in the audit log — they have their own delivery tracking in the Webhooks system. However, the actions that trigger webhooks (booking created, cancelled, etc.) are fully logged.