Audit log & Trash

See who changed what across your workspaces, and recover deleted records from the Trash. The audit log is your activity trail; the Trash is your safety net. Know what gets audited RowFold writes an audit entry for every meaningful change in a workspace: • Records — creating a record, editing a cell, and deleting records each write an entry naming the record and its table. • Schema — creating or renaming a table, adding or removing a field, tables built with AI, and tables created during an import all appear as Schema entries. • People — inviting someone, removing them, or changing their role is logged with the person's name; invitations and role changes record the role too. These entries appear under the Schema filter. • Workspaces — creating a workspace writes a Created entry that names the template it was built from. Every entry captures when it happened, who did it, and a plain-language summary of the change. Read and filter the audit log Open Audit log from Manage workspace to see activity for the current workspace, newest first. The chips across the top show a live count per action — click Created, Updated, Deleted, Schema, Restored, or Impersonated to focus on one kind of change, or All to clear the filter. Each row shows When (in your local time, down to the second), the Action, What changed with the table and record it touched, and By — who did it. The page shows the 200 most recent entries that match your filter. Send records to the Trash Deleting a record never destroys it right away. Tick the checkboxes next to rows in the grid, then click Delete in the bar that appears and confirm — the records vanish from every view and report, but they move to the Trash instead of being erased. Each deletion also writes a Deleted entry to the audit log, so you can always see who removed what. Restore a record Open the Trash to see deleted records from all your workspaces, most recently deleted first. Each row shows what the item is, where it lived (From), Deleted by, When, and an Auto-purge countdown. Click ↶ Restore and the record returns everywhere it appeared before. Its links to other records come back with it — connections are kept intact while an item sits in the Trash. A confirmation banner tells you the restore worked. Delete forever To permanently remove a single item, click Delete forever on its row and confirm. This erases the record and its connections to other records, and it cannot be undone. Empty trash purges everything in one go, also behind a confirmation. It only removes records from tables where you have delete permission — anything you can't delete stays in the Trash, and the banner tells you how many items were actually purged. Watch the retention countdown Every item in the Trash shows an Auto-purge countdown against a 30-day retention window. The days-left badge switches to a warning color once fewer than 7 days remain. Restore anything you care about before its countdown runs out. Who can do what Anyone in a workspace can read its audit log and see its deleted records in the Trash — both pages only ever show workspaces you belong to. Restoring and permanent deletion count as delete actions on the record's table. By default that means workspace Admins and Editors; Contributors and Viewers cannot restore or purge unless a per-table permission override grants them full access. Tips • Deleted a record by accident? It is in the Trash, not gone — restore it from there. • The action chips show live counts, so you can see at a glance how much of the log is edits versus deletions. • The log shows the newest 200 matching entries — apply an action filter to reach further back in a busy workspace. • Restored records come back with their links to other records intact. • There is no rail link to the Trash — open it directly at /Trash. Good to know • Restoring from the Trash does not currently write a Restored entry to the audit log — the Restored filter chip exists, but restores leave no trace in the activity trail. • Delete forever and Empty trash are not logged either; the original Deleted entry is the only audit record of a purged item. • The Impersonated chip always reads zero: impersonation entries are not tied to any workspace, and the audit log only shows workspace activity, so they never surface on this page. • Only records land in the Trash — a field you remove from a table is gone immediately and cannot be recovered here. • Empty trash silently skips records from tables where you lack delete permission, so the purged count can be smaller than what you see listed. • If you lack delete permission on a record's table, ↶ Restore and Delete forever do nothing — the page simply reloads with no banner or error. • While a record sits in the Trash it is hidden from every grid, view, and report — if a record seems to have vanished, check the Trash before rebuilding it. Who can do what • The audit log and the Trash are membership-scoped: you only ever see entries and deleted records from workspaces you belong to. • Restore, Delete forever, and Empty trash all require delete permission on the record's table — workspace Admins and Editors by default; per-table overrides can grant or withhold this for anyone. • Contributors and Viewers can browse the Trash but cannot restore or purge unless a per-table override gives them full access. • Inviting, removing, or re-roling members is Admin-only, and each of those changes is itself logged as a Schema entry. • Impersonation is reserved for super admins; starting and stopping an impersonation both write an Impersonated audit entry.