Audit trail

Every change, on the record who, what, when — and the exact before → after

Academz keeps a tamper-evident, append-only log of every create, update and delete across your academy, plus a complete login history for every panel — so you always know who did what, from which device and where, down to the exact field that changed.

  • Append-only & tamper-evident
  • Field-by-field before → after
  • Passwords & tokens auto-scrubbed

A permanent record you can trust

Accountability built into every panel — every change and every sign-in, captured the moment it happens.

6+ User roles tracked, plus the System
5 Change events — from create to restore
8 Sign-in events — success to lockout
100% Secrets scrubbed before storage

From action to evidence

How a change becomes a permanent record

No setup, no plugins. Every audited action is captured automatically, sealed, and ready to inspect.

Step 1

Someone makes a change

A student, teacher, staff member, affiliate or the system creates, edits, deletes or restores a record in any panel.

Step 2

We capture the full context

Actor and role, the exact fields that moved, timestamp, IP, browser, OS, device and the page that caused it.

Step 3

Secrets scrubbed, row sealed

Passwords, tokens and 2FA secrets are stripped, then the row is written append-only — it can never be edited.

Step 4

Search, inspect, export

Filter by record, actor, event or date, open the before → after diff, and export to Excel or PDF for auditors.

Activity log

An append-only stream of every change

Every create, update, delete and restore lands in one immutable stream, newest first. Each row names the actor and their role, the record they touched and the exact moment — an audit ledger you read, never edit.

  • Created, updated, deleted & restored
  • Actor name with a clear role chip
  • Any tenant user, or the System itself
  • Immutable — rows are sealed, never changed
Every module writes to it
Activity log Append-only
  • Sara · Teacher Course: Algebra I Updated 09:24
  • System Enrollment #4021 Created 09:19
  • Omar · Staff Coupon: SUMMER Deleted 08:57

Before → after

See the exact field that moved

This is the heart of the log. For every edit we store only the fields that actually changed — the old value and the new value, side by side. No vague “record changed”; you see precisely what became what.

  • Only the changed fields are stored
  • Old value → new value, side by side
  • Added, removed and changed, clearly marked
  • Full change history per record
Paired with a full login history
Course: Algebra I Updated by Sara · Teacher · 09:24
  • Price $79.00 $59.00
  • Status Draft Published
  • Seats 30 45

Full context

Who, from where, on what — captured every time

Each entry carries the complete picture: the actor and role, the timestamp, the IP address, the parsed browser, operating system and device type, the request page — and the change history of that very record.

  • IP address (IPv6-safe)
  • Browser, OS & device type
  • The causing page & action
  • Change history per record
Pair it with system health

Login history

A complete sign-in record for every panel

Beyond data changes, Academz logs every authentication event across all panels — successes, failures, logouts, lockouts and two-factor challenges — with the device and the country each attempt came from.

  • Success, failure, logout & lockout
  • Two-factor challenge, pass & fail
  • Device intelligence & country by IP
  • Even attempts on an unknown email
See the transparency suite

Security visibility

Brute-force and enumeration, out in the open

Because failed and unknown-email attempts are recorded too, repeated tries from one identity or IP become obvious. Spot brute-force runs and account-enumeration probes early, and trace the recent attempts behind any single event.

  • Failed & unknown-email attempts logged
  • Repeated tries surface at a glance
  • Recent-attempts forensics per identity/IP
  • Lockouts and rate-limits recorded
Explore every feature

Labeled reasons

Every failure, named — never just “denied”

When a sign-in fails, the log says exactly why — so you can tell a forgotten password from a real attack.

Wrong password Unknown email Account suspended Account disabled Account locked Invalid two-factor Rate-limited

Filter the whole log by any reason in one click.

Privacy by design

Total recall, without ever storing a secret

The log is thorough, not reckless. Passwords, tokens and two-factor secrets are automatically scrubbed before anything is written — they are never stored. And strict multi-tenant isolation means one academy can never see another’s audit trail.

  • Passwords, tokens & 2FA secrets scrubbed
  • Secrets never reach the database
  • Strict per-academy isolation
  • Exports are pre-scrubbed too
Built for universities & enterprises

Two logs, one truth

Data changes and sign-ins, each fully filterable

The Activity Log tracks every record change; the Authentication Log tracks every sign-in. Both are strictly searchable and export to Excel or PDF.

Every record change

Filter by record type, actor, role, event and date; search by record name or actor; open any row’s before → after diff.

Filter by event, actor, role & date Search by record or actor name Before → after diff on every row

Every sign-in event

Filter by outcome, event, failure reason, device, country and panel; search by email, name or IP; inspect the recent-attempts trail.

Filter by outcome, reason, device & country Search by email, name or IP Recent-attempts forensics per event

More in every entry

Everything an audit trail should hold

The details that turn a log line into real, defensible evidence.

Actor & role chip

Every entry names the person and their role — student, teacher, staff, affiliate, school, university or System.

Change history

See the full timeline of changes on any single record, newest first.

Location intelligence

IP resolved to country and city, with a flag on every login event.

Device intelligence

Parsed browser, operating system and device type for every entry.

Powerful filters

Search and filter by record, actor, event, reason and date range.

Excel & PDF export

Export the exact filtered view for auditors in one click — always pre-scrubbed.

Compliance & accountability

Audit-ready from day one

No add-on, no separate security plan. Accountability ships with your platform — everything an auditor asks for is already being recorded.

Tamper-evident, append-only records Full before → after change diff Complete login & security history Secret scrubbing & tenant isolation Labeled failure reasons One-click Excel & PDF export
See it for teams & enterprises
Sealed Append-only ledger SHA · verified

Trusted by admins

Teams that finally have the answer to “who changed this?”

Academy owners and administrators who sleep better with a full trail.

When a price looked wrong, I opened the entry and saw the exact old and new value, who changed it and when. That used to be a mystery.
Nour A. Academy administrator
The login history flagged a burst of failed attempts on one account overnight. We locked it down before any harm — that visibility is priceless.
Khaled S. Platform owner
Our compliance review took an afternoon instead of a week. I filtered, exported to PDF, and handed it over. No secrets, all the facts.
Mariam H. Operations lead

Questions

What admins ask about the audit trail

No. The log is append-only and tamper-evident — a row, once written, can never be edited. It can only be pruned in bulk by an authorized admin, and pruning is itself a recorded action. Nothing is ever quietly changed.

Never. Passwords, tokens and two-factor secrets are automatically scrubbed before any row is written, and exports are pre-scrubbed too. The log keeps the facts of a change, never a secret.

The actor and role, the event (created, updated, deleted or restored), the record affected, the exact fields that moved with their old and new values, plus timestamp, IP, browser, OS, device and the page that caused it.

Yes. Successes, failures, logouts, lockouts and two-factor events are all logged — including attempts against an unknown email — each with a labeled reason, so brute-force and enumeration become visible.

No. Strict multi-tenant isolation means every entry belongs to exactly one academy, and a request can only ever reach its own. Cross-tenant access is impossible by design.

Yes. Filter the log to exactly the view you need, then export it to Excel or PDF in one click — pre-scrubbed of secrets and ready to hand to an auditor.

Every create, update, delete and restore, by every kind of user — student, teacher, staff, affiliate, school and university — as well as automatic actions taken by the System itself.

Accountability, built in

Know exactly who did what, from day one

Give your academy a tamper-evident audit trail and a full login history — no add-ons, no setup. Start free and see every change on the record.

Free to start · No credit card required · Audit-ready out of the box