Activity and audit log

Sqoura keeps one record of everything done in your organisation and shows it to you twice: a compliance view and an everyday one.

View	Where	For
Audit Trail	Settings → Access & Security → Audit Trail	Investigating, proving and exporting. Every action, with who, what, where and whether it was allowed.
Activity Log	The main navigation, outside Settings	Reading at a glance. The same record, written in plain sentences with links through to the thing itself.

Both are append-only. Nobody can edit an entry after the fact — not you, and not Sqoura.

What is recorded

Every entry carries:

• Who acted — and, where a Sqoura support operator was acting as one of your users, who they were acting on behalf of.
• What they did, and what they did it to.
• How sensitive it was: low, normal or high.
• The outcome: allowed, denied, or an error. A refused attempt is recorded just as firmly as a successful one.
• The address and browser it came from, and the session and request it belonged to.
• When, shown as how long ago with the exact time on hover.

High-sensitivity rows carry a warning icon. Anything done during a support session carries an impersonation tag beside the actor.

Reading the Audit Trail

The columns are Action — a plain-English description with the underlying action name beneath it — then Actor, Sensitivity, Outcome, IP and When.

To narrow it down:

1. Search actor, action, target… searches across all of those at once.
2. Action prefix narrows to a whole family at a stroke. Typing payment. gives you everything to do with payments.
3. Impersonations shows only what a support operator did while acting as one of your users.
4. The Sensitivity and Outcome chips under the search row carry live counts for whatever is filtered now. Click one to apply it, click it again to drop it.
5. Clear resets the lot.

Load more pages further back, and a line tells you how many events are loaded.

The Impersonations toggle only filters what is on screen

It narrows the entries already loaded, not the whole history. If you are looking for support activity, press Load more a few times first, then apply the toggle.

Saved views

A filter you will want again can be kept.

1. Set the filters up as you want them.
2. Press Save view — it only becomes available once a filter is active.
3. Name it something you will recognise later, such as High-risk this month.

Saved views appear as chips under the heading. Click one to apply it, or its × to delete it.

Saved views live in one browser

They are stored on the computer you made them on. They do not follow you to another machine, and your colleagues cannot see them. Anyone who needs the same view has to build it themselves.

Reading the Activity Log

The Activity Log presents the same record for everyday use: an avatar, an icon coloured by what happened, and a sentence per row that links through to the entry, payment or tournament it describes.

It filters by category — All activity, Applications, Payments, Tournaments — and by date — All time, Today, Last 7 days, Last 30 days, Last 12 months — with a search box alongside.

The Activity Log’s categories do not cover everything

Its categories are applications, payments and tournaments only. Member changes, role grants and settings changes are recorded, but you will find them in the Audit Trail rather than in an Activity Log category.

Exporting

Both views export the same way, and both ask for a second factor.

1. Press Export.
2. Enter a code from your authenticator app. Exports are always gated on this.
3. The button reads Generating… and the export is queued. You do not have to wait on the page — close it and carry on.
4. When it is ready you get an in-app notification and an email, “Your audit export is ready”. Following the link creates a fresh, short-lived download and starts it. If the download does not begin by itself, the notification carries a Download button.

What you see	What it means
Audit export failed	The export did not complete; the reason is given. Start it again.
Audit export expired — Please start a new export.	The download link was left too long. Links are deliberately short-lived; run a fresh export.

No second factor, no export

An administrator who has not enrolled in two-factor authentication cannot export the audit log at all. The same applies to granting or revoking roles and to deactivating a member. See Your account and security.

A per-person view

For your own account only — your sign-ins, password changes, two-factor changes and revoked sessions — there is Recent Security Activity on Account → Security. To see what one colleague has been doing, open the ⋯ menu on their row in Users & Roles and choose View activity.