Skip to content
Skip to content

The audit trail groups its entries into eight families, which are the filter chips on the Audit trail tab, and each entry reads in the sentence listed here.

The audit trail records what happened in your account, one entry per event. You can filter it by family, and the CSV export uses the same sentences. Some entries change their wording to name the fact they record, and the variants are listed with the entry.

Requests & links

EntryWhen it appears
Request createdYou created a request.
Request closed by the firmYou closed a request.
Renewal request closed, followed by why: answered, the link expired with the data, the firm decided instead, or the person withdrew consentThe link of a consent renewal was closed.
All documents receivedA client has submitted every item you asked for.
Closed early by the personA client finished with items still outstanding.
Link issuedAn upload link was created for a client.
Link openedA client's upload link was opened.
Link completed by the personA client finished and closed their link.
Link refused: expiredSomeone opened a link that has ended.
Link refused: replaced by a new linkSomeone opened a link you replaced with a new one.
Link refused: the request is closedSomeone opened a link on a request that is closed.
Link refused: account unavailableSomeone opened a link while your account is unavailable.
Finished link opened againA client opened a link they had already finished.
Link emailed by usWe emailed a client their link.
Link email could not be sentWe tried to email a client their link and the email failed.
Link copied, Link sent on WhatsApp, Link sent by emailYou chose that way of sharing a link.
Link reissuedYou issued a client a new link.
Link expiry extendedA link's end date was moved later.
A link expired with items outstandingA link ended before the client had sent everything.
A consent link expired without an answerA link on a consent-only request ended with no answer.
Reminders switched onWe were set to remind a client by email.
Reminders switched offYou stopped reminders for a client.
Reminder emailed by usWe emailed a client a reminder.
Reminder due: send a nudgeA reminder came due on a link we do not remind, so we nudged you to send it.
Template savedYou saved a template.
Starter template added at signupWe added your starter template when you created your account.
Template deletedYou deleted a template.
Notice version publishedThe notice for a request was written, and it stays as written.
Notice read in another languageA client read the notice in a language other than English. It appears once for each language of a notice version.

Consents

EntryWhen it appears
Consent recordedA client agreed to the notice on their upload link.
Consent recorded (renewal)A client gave consent again on a consent renewal.
Consent recorded for documents held by the firmA client gave consent on a request that records consent for documents you already hold.
Consent withdrawnA consent was withdrawn.
Consent withdrawn: confirm deletion in the retention queueA consent was withdrawn for documents you hold yourself, so you are asked to confirm that you deleted them.
Consent declined by the personA client declined on a request that records consent for documents you already hold.
Rights link issuedA client's rights link was created when they consented.
Consent receipt emailedA client asked us to email them their receipt.
Rights link opened by the personA client opened their rights link. It appears at most once for a link on one day.

Documents

EntryWhen it appears
Documents receivedA client sent documents or answers. It reads Documents received (some items still pending) when required items are still outstanding.
Document replacedA client replaced a document they had uploaded.
An upload was removed before submittingA client removed a file before they sent it.
Unsubmitted upload clearedWe cleared a file that a client picked and never submitted.
A DigiLocker file failed its integrity check and was not storedA file fetched from DigiLocker did not pass our check, so we did not keep it.

Retention & renewals

EntryWhen it appears
Retention: a decision is coming upA row opened in your Retention queue 15 days before a deletion date.
Retention: renewal started from the person's folderYou offered a renewal from a client's folder.
Retention: the person withdrew, confirm you have deleted what your firm holdsA client withdrew consent for documents you hold yourself, so a row opened in your Retention queue.
Retention: the relationship ended, confirm you have deleted what your firm holdsYou marked the relationship as ended on a request that records consent for documents you hold yourself, so a row opened in your Retention queue.
Retention: decision recordedYou chose to renew, keep or delete on a Retention queue row.
Retention: consent renewal createdA consent renewal was created for a row.
Retention: consent renewal prepared automaticallyWe prepared the renewal ourselves, as your renewal setting says.
Retention: a consent renewal has not been sentA renewal was still unsent ten days or five days before the date.
Consent renewedA client agreed to a renewal.
Renewal declinedA client declined a renewal.
Retention: deleted on scheduleDocuments were deleted on their date.
Retention: deleted on schedule, no decision recordedA row reached its date and nobody had decided.
Retention: deleted on schedule, the person declined the renewalA row reached its date after the client declined.
Retention: deleted on schedule, the renewal went unansweredA row reached its date after the client did not answer.
Retention: deletion confirmed by the firmYou confirmed that you deleted documents you hold yourself. After a withdrawal it reads Retention: deletion confirmed by the firm after a withdrawal.
Retention: deletion confirmed by the firm (person erased)You erased a client who had consented for documents you hold yourself.
Consent-renewal setting changedAn admin changed the consent renewal setting. This entry also appears under People & account.

Rights & erasure

EntryWhen it appears
Rights request received: a copy, a correction or deletionA client asked for that through their rights link.
Rights request received: a copy, a correction or deletion (recorded by the firm)You recorded a request that a client made to you directly.
Rights request answered: doneYou answered a request for a copy or a correction.
Rights request answered: data erasedYou answered a deletion request by erasing the client.
Rights request answered: kept under lawYou answered a deletion request by keeping the documents under a law.
Rights request declinedYou declined a request.
Any of the four above, followed by (by their withdrawal)The client withdrew consent while the request was open, and the withdrawal closed it.
Any of the four above, followed by (by the erasure)You erased the client while the request was open, and the erasure closed it.
Person erasedA client's data was erased.
Data export servedA copy of one client's data was produced.
Correction appliedA client's details were corrected.

People & account

EntryWhen it appears
Teammate invitedAn admin invited a colleague.
Invitation resentAn admin resent an invitation.
Invitation withdrawnAn admin revoked an invitation.
Teammate joinedA colleague accepted an invitation.
Terms of Service and Privacy Policy acceptedA person accepted the Terms of Service and the Privacy Policy, at signup or when joining your firm.
Role changed: followed by the old and the new roleA colleague was moved to another role.
Role added, Role renamed, Role removedAn admin changed the list of roles. The entry names the role.
Role changed: followed by a role's nameAn admin changed what a role can do. The entry says how many people were signed out.
Teammate disabledAn admin disabled a colleague.
Teammate re-enabledAn admin enabled a colleague again.
Firm createdYour firm's account was created.
Firm details updatedAn admin changed the firm's details.
Logo updatedAn admin added or replaced the logo.
Logo removedAn admin removed the logo.
Firm data shreddedThe data of an account was erased.
Account createdA person created an account.
Verification email sentWe emailed a link to confirm an address.
Email verifiedA person confirmed their address.
Password reset requestedSomeone asked to reset a password.
Password resetA password was reset.
Two-factor turned offA person turned off their two-factor authentication.
Two-factor reset by an adminAn admin reset a colleague's two-factor authentication.
Two-factor reset by Confidential Dispatch supportWe reset two-factor for the only admin after they wrote to us.

Views & sign-ins

EntryWhen it appears
Document viewedA colleague opened a document in the viewer.
Document downloadedA colleague downloaded one document or several.
Signed inA colleague signed in.
Signed outA colleague signed out.
Sign-in failedA sign-in attempt did not succeed.
Sign-in locked (too many attempts)Sign-in for an account was paused after repeated failures.
Action refused (not permitted for this role)A colleague tried an action that their role does not include.
Opened a page outside their roleA colleague opened a page that their role does not include. The entry names the page.

Breach & export

EntryWhen it appears
Breach incident openedYou recorded a breach incident.
Breach incident: the date it became known was changedThe date the breach became known was edited.
Breach incident: the firm recorded that the affected people were toldYou marked the letter to the affected people as sent.
Breach incident: the firm recorded its report to the BoardYou marked the report to the Board as sent.
Breach incident closedYou closed a breach incident.
All clients exported as a CSVAn admin downloaded the client list.
Audit trail exported as a CSVAn admin downloaded the audit trail.
Export · documents & evidenceAn admin downloaded a full export. The entry adds the part number when the export has several parts.
Export · documents onlyAn admin downloaded the documents of an export.
Export · evidenceAn admin downloaded the evidence on its own.
Export limit reset by Confidential Dispatch supportWe reset your export limit after you asked us to.

Plan and invoice entries appear under All only, because they belong to none of the eight families. They read Plan changed, Plan chosen at signup, Plan upgraded and Tax invoice issued.