Audit log & data export

Everything consequential gets a permanent audit entry: automatic-trading runs (the daily engine and the hourly crypto safety check) (the orders they planned and why any were skipped), reconciliation syncs and the drift you acknowledge, paper↔live gate changes, risk and strategy changes, and subscription changes. Entries are only ever added, never changed or deleted. The log is the “what actually happened” record the rest of the app is interpreted against.

Two things are recorded differently than you might expect. Kill-switch actions (Pause, Cancel open orders, Liquidate) surface as email alerts rather than audit entries. And individual fills aren’t logged one by one: each reconciliation sync entry summarizes the fills it pulled in from your broker.

Reading the log

The Audit page lists events newest-first, grouped by day. Each row carries a plain-language summary of what happened, the account it touched (paper or live), and who did it — you, the automatic engine, or a system check — with a link to the screen it’s about. Pick a time range at the top, filter by category with the chips, or search by symbol. Expanding a row reveals the event’s complete raw record (every stored field exactly as written, not a summary) because when you’re auditing money movements, paraphrase isn’t good enough.

Because a background reconciliation check runs every 15 minutes, clean checks would otherwise crowd out everything else. Collapse routine checks (on by default) folds each run of back-to-back clean reconciles into a single line so the events you came to see stay visible; turn it off to see every check individually. Nothing is ever hidden from the record — collapsing only changes how it’s displayed.

The list covers the time range you pick; to work with your full retained history, use the JSONL export, which matches the range you’re viewing.

JSONL export

The header exports a plain-text file (JSONL): one complete record per line, nothing summarized away. It covers the same time range shown on the page — choose All time to export your full retained history. See Export your data.

Retention

Free retains 30 days of audit history; Pro retains 7 years (chosen to outlast the IRS six-year lookback). Older entries are removed automatically once they pass your plan’s limit, so export before downgrading if you want history older than 30 days. Two exceptions stay longer than the plan window because live behavior depends on them: your drift acknowledgments are kept permanently (so a difference you’ve accepted never re-blocks live trading later), and automatic-trading run records are kept at least 90 days (they carry the take-profit and re-buy safeguards between runs).