- History of changes made to the records by you, your end-users, and the application workflows. For example, when a user updates a record with new values, or deletes a record, the updated or deleted record values are logged with details like the old value, modified value, the user who modified or deleted the record, modified time, and more.
- History of print and export actions carried out in a report by users. Here, you can filter and view the respective actions based on a form's report. For example, when a user prints or exports a report, the report details like the report name, exported format, form name, columns exported, IP address, etc., are also logged.
In short, the Audit Trail feature keeps track of the changes made in your application, as well as when data has been modified, how much, and by whom. This serves as documentary evidence for the sequence of activities in your application records and reports.
- Enable/disable the capture of IP Address
- View record edit history
- Manage personal data and health information capture for fields
- View report export and print history
- Export audit logs
How long is data saved?
Audit log | Data retention time |
Record changes (edit and delete actions) | 1 year |
Report actions (export and print) | 3 months |
Configure the capture of IP Address and source information
- Navigate to Operations on the left pane and select Audit Trail under Applications.
- Click the View Audit Trail button in the center. A popup will appear.
- Select the Application and Form for which the audit trail has to be recovered, then click View.
- The edit history of the selected form for the last 365 days will be displayed.
- Navigate to the required tab — Record Logs or Export & Print Logs.
- Click the Settings button at the top-right corner.
- Select the Enable option under Capture IP address and source information, then click Save.
- When enabled, the IP Address and source information will be captured in the detail view of the audit logs.
- Upon disabling, the future audit logs will not capture the IP Address and source information. The previous logs will remain unchanged, i.e., they will display the IP Address and source information.
View record edit history
- Click Audit Trail under Operations.
- Click the View Audit Trail button in the center. A popup will appear.
- Select the Application and Form for which the audit trail has to be recovered, then click View.
- The edit history of the selected form for the last 365 days will be displayed in the Record Logs tab.
- You can choose to capture the IP Address and source information in the detailed audit logs by clicking the Settings button at the top-right and enabling it.
- The audit history can be filtered using the Filters section on the right side of the page. The Date filter should be cleared off when switching between audit tabs.
- Click on an entry in the list to view the detailed record log.
- To switch the view and see the record edit history of a different form, click the Change Form button at the top right corner. Then, select the Application and Form for which the audit trail has to be recovered and click View.
Manage personal data and health information capture for fields
When you're using fields in your Zoho Creator applications to capture any sensitive, confidential, or personally identifiable information (PII), you can add another layer of protection for them by enabling Contains personal data. When you're using fields to capture health-related information, you can enable the Contains health info field properties. Enabling the Contains health info field property also asks you to encrypt the collected data.
- Edit your app.
- Open the form builder.
- Select the required field. Its Field Properties will appear on the right.
- Navigate to the Field Properties > Data Privacy section.
- Check the checkbox next to Contains personal data (PII).
- Check the checkbox next to Contains health info (ePHI).
- Click Yes in the respective dialog box appears to encrypt your data.
- The fields that are marked as containing ePHI (Electronic protected health information) and PII (personally identifiable information) data are captured in the detailed audit logs for export and print actions.
View report export and print history
- For code-signed apps (Android and iOS), the export and print actions will be logged only after a new build is taken from our server.
- For SDK apps, the export and print actions will be logged only after the framework is updated to the latest version.
- Navigate to Operations on the left pane and select Audit Trail under Applications.
Click the View Audit Trail button in the center. A popup will appear.
- Select the Application and Form for which the audit trail needs to be recovered, then click View.
- Navigate to the Export & Print Logs tab.
- The print and export history of all reports of the chosen form for the last 90 days will be displayed.
- You can choose to capture the IP Address and source information in the detailed audit logs by clicking the Settings button at the top-right and enabling it.
- The audit history can be filtered using the Filters section on the right side of the page.
- All reports of the form will be chosen by default. You can select the required report (active or deleted) of the form for which you want to view the print or export actions.
- Check the checkboxes beside the required actions - Exported and Printed to view the respective audit logs.
- Select the required date or specify a range to view the audit information. The Date filter must be cleared off when switching between audit tabs.
- You can also type a specific user's email address to view the history of their export and print actions.
- Click on an entry in the list to view the detailed audit record for export and print logs.
- Below image shows how the Detailed Export Log looks like. The ePHI and PII fields are captured in the detailed audit logs upon enabling the respective field properties for fields that capture any sensitive, confidential, or personally identifiable information fields.
- Below image shows how the Detailed Print Log looks like:
- To switch the view and see the record edit history of a different form, click the Change Form button at the top right corner. Then, select the Application and Form for which the audit trail has to be recovered and click View.
Export audit logs
The audit logs for both record changes and export and print actions can be exported by clicking the Export as CSV button in the respective tabs. You can filter the data to be exported by choosing the required option under the Filters tab and click Export as CSV. The data will be downloaded into two separate CSV files.
Limitations
- Record audit does not apply to the following field types in updated records:
- Subform
- Rich Text
- URL
- Formula
- Signature
- Text area
- File upload
- Image
- Audio
- Video
- Record audit does not apply to the subform field type in deleted records.
- Records updated using script actions will not be audited.
- Audit trail data for past one year alone will be stored.