Where to find audit information
| View | Who | Covers |
|---|---|---|
| Team & settings → Activity log | Organisation admins & owner | Everything in that organisation, filterable, CSV export |
| Organisation dashboard → Recent activity | All members | Recent survey and team activity at a glance |
| Admin tools → Platform audit | Quibzy staff (two-step verification required) | Sign-ups, every organisation, account security |
| Admin tools → Data provenance report | Quibzy staff | Real vs synthetic users, organisations, surveys and responses |
Organisation activity log
- Open your organisation’s Team & settings and expand Activity log (admins and owner).
- Filter by Category (Onboarding & team · Polls & surveys · Results, reports & data · Security & access · Billing & integrations · Moderation), by Person (email), and by From / To date, then select Apply.
- Select Download CSV to export the filtered events (up to 50,000 rows, UTC timestamps) as evidence for reviews or auditors.
- Use Load older activity to page back through history on screen.
Common audit tasks
| Question | Filter | Look for |
|---|---|---|
| Who joined, and with what role? | Onboarding & team | Invited a member · Joined (accepted invitation) · Changed a member’s role |
| Who left or was removed? | Onboarding & team | Removed a member · Left the organisation · Transferred ownership |
| When did a survey go live or close? | Polls & surveys | Published a survey · Closed a survey · Paused / Resumed |
| Who changed a survey after launch? | Polls & surveys | Changed survey settings · Published a survey (with version number) |
| Who accessed or exported results? | Results, reports & data | Requested / Downloaded an export · Created a spreadsheet link · Generated an AI summary |
| Were any responses removed? | Results, reports & data | Deleted a response · Retention policy deleted responses |
| Did Quibzy support access our data? | Security & access | Quibzy platform admin accessed this organisation |
| Which keys and integrations exist? | Security & access / Billing & integrations | Created / Revoked an API key · Added a webhook · Connected Teams/WhatsApp |
Poll and survey results themselves are reports, not audit events. See Results, reports & exports. The audit shows who opened, exported or changed them.
What is recorded
Each event records the time, the person who did it, the action, the item affected and safe details (a role name, a version number, a plan). Events are append-only: nobody, including admins, can edit or delete them from Quibzy. Audit records never contain survey answers, passwords, access codes, API keys or tokens.
Your own account activity
Sign-ups, password changes and resets, two-step verification changes and “sign out everywhere” belong to your account, not to an organisation. They’re kept in the platform audit. For a copy of your personal data, use Account settings → Your data → Download my data.
Platform audit (Quibzy staff)
Staff open Platform audit (also linked from the moderation queue). It has the same filters plus Organisation address. Typical uses:
- Onboarding review: Category: Onboarding & team and a date range lists every sign-up (with method: email, Google or Microsoft), each new organisation and every invitation.
- Customer support: filter by the customer’s email or organisation address.
- Security review: Category: Security & access for MFA changes, password resets and platform-admin access.
Audit principles
- Least privilege: only admins and owners see the organisation log; only staff with two-step verification see the platform audit.
- Tamper resistance: events can’t be edited or deleted through the product.
- Data minimisation: no answers or secrets in audit records.
- Exportability: CSV with UTC timestamps for external retention or SIEM import.