Skip to content
  • There are no suggestions because the search field is empty.

Access Logging and Audit Control

Originality now lets administrators view audit logs for actions performed on your license, so your institution can review that access on a recurring basis and demonstrate GDPR accountability if audited.

 

This article is updated to reflect changes made after the v2026.09 release on September 4, 2026.

In this article:

How Audit Logs work

Every action involving personal data in Originality — reports, submitted documents, hits and findings — is captured in an audit log. This gives your data protection officer or system owner a reviewable record of who looked at what, and when, so you can assess whether individual lookups were legitimate.

Where to find Audit Logs

If you're an Administrator in Originality, go to Audit Logs in the left-side menu. The table shows, for each event:

  • Timestamp – when the action occurred
  • Category – the type of object involved (User, Document, API Client, and others)
  • Event – a plain-language description of what happened and who performed it. For example, "John Doe submitted document ExampleDocument.pdf"

Note! Click the eye icon on any row to view more details about that event.

Filtering the log

Use the Date range control above the log table to narrow the log to a specific period, and All categories to filter by event type (User, Document, API Client, etc.). Combine both to focus on exactly the activity you need to review.

Exporting logs

Click Export to download the audit log as a CSV file. In the export dialog, choose a time range:

  • Last 7 days
  • Last 30 days
  • Last 1 year
  • A custom range, set manually with From and To dates

Note! The export always covers the full log for the selected time range — filters applied to the table view (date range or category) are not applied to the export.

Retention

Audit logs are retained for 90 days. Export logs you need to keep longer before they age out.

Why this matters

Access logging gives institutions a reviewable record of access to personal data in Originality. It supports:

  • Systematic, recurring review of who accessed reports, submitted documents, and findings
  • Demonstrating GDPR accountability during an audit
  • Assessing, as data controller, whether individual lookups were legitimate