Audit log & data export

Everything consequential gets an audit entry: orders you place by hand (from the order ticket or a holding’s Close button) and orders you cancel by hand, kill-switch actions (Pause, Resume, Cancel open orders, Liquidate), broker-key saves and disconnects, turning two-factor authentication on or off, automatic-trading runs (the daily engine and the hourly crypto safety check — the orders they planned and why any were skipped), reconciliation syncs (including any that fail) and the drift you acknowledge, paper↔live gate changes, risk and strategy changes, turning a strategy’s Follow list updates switch on or off (whether it takes the adds and removals of its followed list), including when adding a strategy to your mix switches it on, and subscription changes. Entries are only ever added, never changed after the fact; older ones are removed on your plan’s retention schedule (see Retention, below). The log is the “what actually happened” record the rest of the app is interpreted against.

A few things are recorded differently than you might expect. Individual fills aren’t logged one by one: each reconciliation sync entry summarizes the fills it pulled in from your broker, and the Orders page (and its CSV export) shows each order’s fills. A hand-placed order’s entry is written when your broker accepts it, with the symbol, side, and quantity — so searching the log by symbol finds it — and a broker-key entry never contains the keys themselves, only which account was connected. And a Risk & Caps save writes one entry, not one per field: everything the save changed — sleeve budgets, caps, dollar limits, the drawdown trigger, an advanced cap switch, or the Order limits card’s Risk caps switch (named order limits) — is recorded with its old and new value in a single “risk caps updated” entry.

Reading the log

The Audit page lists events newest-first, grouped by day. Each row carries a plain-language summary of what happened, the account it touched (paper or live), and who did it — you, the automatic engine, or a system check — with a link to the screen it’s about. Pick a time range at the top, filter by category with the chips, or search by symbol. Expanding a row reveals the event’s complete raw record (every stored field exactly as written, not a summary) because when you’re auditing money movements, paraphrase isn’t good enough.

Because a background reconciliation check runs around the clock — as often as every 15 minutes — clean checks would otherwise crowd out everything else. Collapse routine checks (on by default) folds each run of back-to-back clean reconciles into a single line so the events you came to see stay visible; turn it off to see every check individually. Nothing is ever hidden from the record — collapsing only changes how it’s displayed.

The list covers the time range you pick; to work with your full retained history, use the JSONL export, which matches the range you’re viewing.

JSONL export

The header exports a plain-text file (JSONL): one complete record per line, nothing summarized away. It covers the same time range shown on the page — choose All time to export your full retained history. The category chips and the symbol search only narrow what’s on screen; the file includes every event in the range. See Export your data.

Retention

Free retains 30 days of audit history; Pro retains 7 years (chosen to outlast the IRS six-year lookback). Older entries are removed automatically once they pass your plan’s limit, so export before downgrading if you want history older than 30 days. A settings-file import writes one entry per section it applied (Risk & Caps, Strategies, Universe), each with what changed, linked to that tab. An import never changes Auto-execute or Follow list updates, so each of those entries also notes either switch the file had set differently from yours, as not applied. The Universe entry also names any list you agreed to in the review with Agree…, since that agreement is saved together with the import. A switch you then flip from the import’s result is recorded as your own change (like flipping it on its own page), not as part of the import, and so is keeping held symbols as your own picks. Two exceptions stay longer than the plan window because live behavior depends on them: your drift acknowledgments are kept permanently (so a difference you’ve accepted never re-blocks live trading later), and automatic-trading run records are kept at least 90 days (they carry the take-profit and re-buy safeguards between runs).

One kind of entry is kept shorter than the Pro window: routine clean checks — the background broker checks that found your accounts and SleeveFolio’s records already in agreement, the same entries Collapse routine checks folds away — stay in the app for 90 days, with an archived copy kept after that. They arrive around the clock (up to 96 a day), so keeping each one for 7 years would bury the entries that matter. Any check that found a difference, your drift acknowledgments, your orders, kill-switch actions, settings changes, and automatic-trading run records are untouched by this and keep their full window — and fills are shown per order on the Orders page and its CSV export either way. On Free nothing changes — its 30-day window is already shorter.