Who accessed what, when, and what they did.

Document and member-record actions are logged separately from the documents, so deleting a document does not erase its access history.

Staff clarity: CRM staff requests should send a unique x-actor-id. If a shared owner/staff credential is used without an actor ID, the audit will record owner-staff rather than inventing a person.

Enter the owner token to review the audit trail.