PlatformUpdated 20 Aug 2026

Activity & the audit trail: who did what, and what changed

Two records, two questions. Activity is the readable timeline of what was done by your team, the assistant, connected apps and the outside services Finocket calls on your behalf, with failures collected under Needs attention. The Audit log is the tamper-evident snapshot of what a record said before it was changed or deleted. Neither can be edited by anyone, including you.

Finocket keeps two separate records of what happened to your workspace, and they answer two different questions. Activity is the readable history of what was done by your team, by the assistant, by connected apps, and by the outside services Finocket talks to on your behalf. The Audit log is the tamper-evident record of what was changed or deleted in your books, with the previous state kept in full.

The workspace timeline: people, the assistant and outside services on one thread, failures filterable (desktop view)
The workspace timeline: people, the assistant and outside services on one thread, failures filterable
Open ActivityEverything that happened, newest first

Reading the Activity timeline

Every entry is one sentence in plain language: who, what, and how it went. Nothing on this screen prints an action code, a table name or a raw id at you.

  • Entries are grouped by day (Today, Yesterday, then the date), with times shown in IST.
  • Anything that failed or was refused carries a Needs attention badge and a red card edge, and the filter row counts them for you.
  • The refresh control at the top re-reads the timeline. It is a snapshot rather than a live feed, so nothing new appears until you refresh or reopen the screen.

Who did it: five kinds of actor

Finocket distinguishes a person from an automation from an assistant, and never writes one down as another. The filters group them:

  • People & apps: someone on your team working in the app, or a connected app using an API key.
  • Assistant: two different things, kept apart. “The assistant, on your behalf” is a tool call you asked for. “The assistant, on its own” is an autonomous action.
  • Outside services: a call Finocket made to somebody else's system: the e-invoice IRP, a marketplace, your email or WhatsApp provider.
  • Scheduled work Finocket does with no human in the loop is recorded as Finocket, automatically, and appears under Everything.

Why the outside calls sit on the same timeline

“I filed the return” and “the GSP rejected it” are one story. Split across two screens, that is how people end up believing something worked. So an outbound call appears in the same stream as the action that caused it, with the provider named, how long it took, and which attempt it was.

One status to know is was already done. When an IRP answers “already registered”, the document is filed. Finocket shows that as a success, because sending you to chase a problem you do not have is its own kind of failure.

The Audit log is a different record

Reports → Audit log answers “what did this row look like before someone changed it?”. A database trigger snapshots the previous state of a row whenever it is updated or deleted, and writes it somewhere nothing in the app can reach. Tap a line to expand the full before-state as it stood.

  • It covers far more than invoices: payments, expenses, journal vouchers, ledgers, fixed assets, cost-centre splits, saved reports, workflow rules and more all carry the trigger.
  • Routine edits appear here too, such as marking an invoice paid or correcting an amount. That is the trail working normally.
  • Use Activity for what was done; use the Audit log for what a record used to say.

What these screens will not do

  • They will not let anyone edit or delete an entry. No teammate, admin, owner or support person can. Both records are readable by your workspace and writable by nothing. There is no delete button because there is no delete permission to hang one on.
  • Activity will not name the person. It tells you an action came from someone on your team, not which one. For the per-person split, open Settings → Usage & activity, which separates your own actions from the workspace's.
  • It will not search, filter by date, or export. There is no date range, no text search and no CSV on Activity. It is a screen for reading the recent past.
  • It will not go back further than the most recent entries. Activity loads roughly the last hundred actions and the last hundred outside calls, and stops. There is no next page.
  • It will not backfill. Nothing that happened before this record existed appears in it, and turning a feature on does not reconstruct its past.
  • It will not shout if it cannot load. If the read is denied or the data is not there, Activity shows an empty timeline rather than an error. An unexpectedly empty screen on a busy workspace is worth raising with us.
  • The Audit log will not show you the “after”. It keeps the previous state; the current state is on the record itself. And it identifies the actor by a shortened id, not a name.
  • Neither is an alarm. Nothing here notifies you. A failed call sits quietly under Needs attention until somebody looks.

Frequently asked questions

What is the difference between Activity and the Audit log?

Activity answers what was done (an invoice sent, a return filed, a call made to the e-invoice portal) in one plain sentence per event. The Audit log answers what a record used to say: whenever a row in your books is updated or deleted, a trigger snapshots its previous state in full. Read Activity to reconstruct events; read the Audit log to reconstruct a number.

Can I delete an entry from my activity or audit trail?

No, and neither can anyone else, including a teammate, an admin, the owner or Finocket support. Both tables are readable by your workspace and writable by nothing; there is no delete permission for a button to hang on.

Why does Activity say 'someone on your team' instead of naming the person?

The timeline attributes by kind of actor, not by person: a teammate, a connected app, the assistant on your behalf, the assistant on its own, or Finocket automatically. For the per-person view, open Settings → Usage & activity, which separates your own actions from the whole workspace's.

My new invoice is not in the Audit log. Is something broken?

No. The Audit log records updates and deletions only, so a freshly created record never appears there. Its creation belongs to the Activity timeline. An empty Audit log means nothing in your books has been changed after the fact.

An outside service says 'was already done'. Did my filing fail?

No, the opposite. When an IRP answers 'already registered', the document is filed. Finocket shows that as a success rather than a failure, because sending you to chase a problem you do not have wastes your afternoon.

Does the log store my GSTIN, bank details or API keys?

Keys, tokens, passwords and OTPs are dropped entirely before anything is written. Identifiers like a GSTIN, PAN, bank account, UPI ID, phone or email are kept only masked: 27AAAPA1234A1Z5 is stored as 27•••••••••Z5. Enough to prove a call happened; not enough to be worth stealing.

Why is my Activity screen empty?

Most often because nothing has happened yet. The record does not backfill, so nothing from before it existed appears in it. Note that Activity also degrades to an empty timeline rather than an error if it cannot read the data, so an empty screen on a busy workspace is worth raising with support.

Can I export Activity or search it by date?

No. There is no date range, no text search and no CSV, and it loads roughly the last hundred actions and hundred outside calls with no next page. It is built for reading the recent past, not for reporting on it.

Related articles