The Foyer Logs page is where all user interaction data is stored within your client portal. By default, all user interactions are recorded and preserved on the Logs page.
The "Logs" Menu item can also be customized with different logos and text as well.
Below is a list of all audit log events that can be generated in the Foyer Client Portal.
ID | Event label | Definition |
3 | Delete File Version | A user removed one specific version of a file while leaving other versions intact. The latest remaining version now becomes the current one. |
4 | Delete File | The file, and every version of it, is permanently erased and cannot be recovered by end-users. |
5 | Login | A user successfully authenticated and entered the portal. |
6 | Logout | The user voluntarily signed out. Any open tokens are invalidated. |
7 | Login Failed: Wrong Password | Someone attempted to sign in with an email but an incorrect password. |
8 | Login Failed: MFA Failed | The second-factor (TOTP, SMS, etc.) was entered incorrectly, so login was blocked even though the password was correct. |
9 | Form Submission Read | A user opened or previewed a completed form submission. The event logs which submission and which user viewed it. |
10 | Space Access | Indicates that a workspace (Space) was permissions to a user or group. |
11 | File Version Access | A user previewed a specific version of a file |
12 | File Upload | A brand-new file was added to the portal. The log captures uploader, file name, size, and destination folder. |
13 | Viewed Chat Messages | The user opened a conversation thread and loaded its message history, marking messages as “seen.” |
14 | Deleted Space | An entire Space—including all enclosed folders and chats—was permanently removed. |
15 | Created Space | A new Space was generated for a client, project, or internal team. |
17 | File Upload (New Version) | A user uploaded a replacement version of an existing file. Prior versions remain available unless later deleted. |
18 | Created Folder | A new folder was added within a Space or another folder. |
19 | Deleted Group | A permission group was removed. |
20 | Updated Group | The name or membership of a permission group was modified. |
21 | Created Group | A new permission group was created to manage role-based access. |
22 | Updated Organization | The organization’s profile details (name, branding, logo) were edited. |
23 | Updated User | An admin or the user themselves changed profile data such as name or email. |
25 | Deleted User | A user account was permanently removed; associated personal data is purged or anonymised per policy. |
26 | Updated Organization Settings | Global settings—such as default permissions, branding colours, or time zone—were changed. |
27 | Registration Failed: Wrong Code | A prospective user entered an invalid invitation or verification code and could not complete sign-up. |
28 | Created User | An account was created either by an admin invitation or client self-registration (if enabled). |
29 | Resent Invitation | An admin resent a pending invitation email to a not-yet-activated user. |
30 | Updated Notification Preferences | A user or admin changed which email or in-app alerts the user receives. |
31 | Updated Space | Metadata of an existing Space (name, description, default visibility) was modified. |
32 | Enabled MFA via Authenticator | The user turned on multi-factor authentication with an authenticator app, adding an extra security layer. |
33 | Disabled MFA via Authenticator | The user removed authentication-based MFA, relying solely on their password (or a different factor). |
34 | Updated Form Submission | Edits were made to data inside an already-submitted form—common for admin corrections. |
35 | Submitted Form | A user completed and sent a form; the submission is now stored and timestamped. |
36 | Created Page | A new portal page (Markdown, rich text, or dashboard widget layout) was added. |
37 | Updated Page | Content, title, or layout of an existing page was changed. |
38 | Deleted Page | A page was removed from the portal. |
39 | Sent Form Submission Email | An automated or manual email was dispatched containing form data or a link to the submission. |
40 | Commented on Form Submission | Someone left an internal or client-visible comment on a specific form submission. |
41 | Previewed File | A user opened the in-browser preview of a file (PDF, image, video, etc.) without downloading it. |
42 | Downloaded File | The user downloaded a local copy of a file to their device. |
43 | Moved File | A file was relocated to a different folder or Space; path history is preserved. |
44 | Uploaded File | Indicates a new file was added. |
45 | Renamed File | The file’s name changed but its content and ID remained the same. |
46 | Created SafeLink | A secure, shareable link was generated to provide external access to a file or folder. |
47 | Updated SafeLink | Scope of an existing SafeLink was modified. |
48 | Deleted SafeLink | The SafeLink was revoked; any public access via that link now fails. |
49 | Public SafeLink File Download | Someone outside the portal downloaded a file using a SafeLink. |
50 | Created Form Definition | A brand-new form template was added for future submissions. |
51 | Updated Form Definition | Fields, validations, or styling of an existing form template were changed. |
52 | Deleted Form Submission | A specific form entry was permanently removed from storage. |
53 | Deleted Form Definition | A form template was deleted, preventing new submissions on that form. |
54 | Created Email Template | A reusable email template was added for notifications or campaigns. |
55 | Updated Email Template | Content or variables of an email template were edited. |
56 | Deleted Email Template | An email template was removed. |
60 | Exported Form Submissions | A CSV or XLS export of one or more form submissions was generated and downloaded. |
61 | Updated App | Settings or scopes of an existing third-party app integration were changed. |
62 | Created App | A new third-party integration or custom app was connected to the portal. |
63 | Deleted App | An app integration was disconnected. |
64 | Restored Apps to Default | All app settings were reset to their original default configuration. |
65 | Client Self Registration | A client created their own account using a public sign-up link (if enabled). |
66 | Update Organization-Wide Notification Preferences | An admin updated default notification rules that apply to all users unless individually overridden. |