Logs

ID

Event label

Definition

3

Delete File Version

A user removed one specific version of a file while leaving other versions intact. The latest remaining version now becomes the current one.

4

Delete File

The file, and every version of it, is permanently erased and cannot be recovered by end-users.

5

Login

A user successfully authenticated and entered the portal.

6

Logout

The user voluntarily signed out. Any open tokens are invalidated.

7

Login Failed: Wrong Password

Someone attempted to sign in with an email but an incorrect password.

8

Login Failed: MFA Failed

The second-factor (TOTP, SMS, etc.) was entered incorrectly, so login was blocked even though the password was correct.

9

Form Submission Read

A user opened or previewed a completed form submission. The event logs which submission and which user viewed it.

10

Space Access

Indicates that a workspace (Space) was permissions to a user or group.

11

File Version Access

A user previewed a specific version of a file

12

File Upload

A brand-new file was added to the portal. The log captures uploader, file name, size, and destination folder.

13

Viewed Chat Messages

The user opened a conversation thread and loaded its message history, marking messages as “seen.”

14

Deleted Space

An entire Space—including all enclosed folders and chats—was permanently removed.

15

Created Space

A new Space was generated for a client, project, or internal team.

17

File Upload (New Version)

A user uploaded a replacement version of an existing file. Prior versions remain available unless later deleted.

18

Created Folder

A new folder was added within a Space or another folder.

19

Deleted Group

A permission group was removed.

20

Updated Group

The name or membership of a permission group was modified.

21

Created Group

A new permission group was created to manage role-based access.

22

Updated Organization

The organization’s profile details (name, branding, logo) were edited.

23

Updated User

An admin or the user themselves changed profile data such as name or email.

25

Deleted User

A user account was permanently removed; associated personal data is purged or anonymised per policy.

26

Updated Organization Settings

Global settings—such as default permissions, branding colours, or time zone—were changed.

27

Registration Failed: Wrong Code

A prospective user entered an invalid invitation or verification code and could not complete sign-up.

28

Created User

An account was created either by an admin invitation or client self-registration (if enabled).

29

Resent Invitation

An admin resent a pending invitation email to a not-yet-activated user.

30

Updated Notification Preferences

A user or admin changed which email or in-app alerts the user receives.

31

Updated Space

Metadata of an existing Space (name, description, default visibility) was modified.

32

Enabled MFA via Authenticator

The user turned on multi-factor authentication with an authenticator app, adding an extra security layer.

33

Disabled MFA via Authenticator

The user removed authentication-based MFA, relying solely on their password (or a different factor).

34

Updated Form Submission

Edits were made to data inside an already-submitted form—common for admin corrections.

35

Submitted Form

A user completed and sent a form; the submission is now stored and timestamped.

36

Created Page

A new portal page (Markdown, rich text, or dashboard widget layout) was added.

37

Updated Page

Content, title, or layout of an existing page was changed.

38

Deleted Page

A page was removed from the portal.

39

Sent Form Submission Email

An automated or manual email was dispatched containing form data or a link to the submission.

40

Commented on Form Submission

Someone left an internal or client-visible comment on a specific form submission.

41

Previewed File

A user opened the in-browser preview of a file (PDF, image, video, etc.) without downloading it.

42

Downloaded File

The user downloaded a local copy of a file to their device.

43

Moved File

A file was relocated to a different folder or Space; path history is preserved.

44

Uploaded File

Indicates a new file was added.

45

Renamed File

The file’s name changed but its content and ID remained the same.

46

Created SafeLink

A secure, shareable link was generated to provide external access to a file or folder.

47

Updated SafeLink

Scope of an existing SafeLink was modified.

48

Deleted SafeLink

The SafeLink was revoked; any public access via that link now fails.

49

Public SafeLink File Download

Someone outside the portal downloaded a file using a SafeLink.

50

Created Form Definition

A brand-new form template was added for future submissions.

51

Updated Form Definition

Fields, validations, or styling of an existing form template were changed.

52

Deleted Form Submission

A specific form entry was permanently removed from storage.

53

Deleted Form Definition

A form template was deleted, preventing new submissions on that form.

54

Created Email Template

A reusable email template was added for notifications or campaigns.

55

Updated Email Template

Content or variables of an email template were edited.

56

Deleted Email Template

An email template was removed.

60

Exported Form Submissions

A CSV or XLS export of one or more form submissions was generated and downloaded.

61

Updated App

Settings or scopes of an existing third-party app integration were changed.

62

Created App

A new third-party integration or custom app was connected to the portal.

63

Deleted App

An app integration was disconnected.

64

Restored Apps to Default

All app settings were reset to their original default configuration.

65

Client Self Registration

A client created their own account using a public sign-up link (if enabled).

66

Update Organization-Wide Notification Preferences

An admin updated default notification rules that apply to all users unless individually overridden.