Go to Settings > Account > Audit Log. It lists your team's sign-ins and key actions in Streamlined, newest first. Each row shows who did it and when.
Read the log
Each row shows a Timestamp and the Activity: the team member's name and email and what they did, such as Invoice Voided or Sign In.
Click a row for more. Depending on the event, you'll see the IP address, the Auth method used to sign in (password, Google, Microsoft, or passkey), the Resource it changed, and other Details.
Filter the log
Use the filters at the top. Click Apply on each one.
Event type: one or more events, grouped by area.
User: one team member.
IP address: an exact address, such as 192.168.1.1.
A date range.
Filters combine. For example, you can see every refund one person issued last month.
What's recorded
The log covers the events in the Event type filter:
Auth: sign-ins, failed sign-ins, password resets, and accepted invitations.
Draft invoice and Invoice: created, edited, scheduled, issued in bulk, and voided.
Payment: payments recorded, refunds issued, credit notes created, and payments applied to invoices.
Customer and Customer group: created, updated, deleted, and exported.
QuickPay: invitations sent and saved payment methods removed.
Integration: connected, disconnected, and settings changed.
Admin: team members invited or removed, and permission changes.
Other: CSV exports and settings changes.
Export the log
Click Export CSV (↓) at the top right to download what your filters show. The icon isn't shown on a phone, so use a computer.
Act on activity you don't recognize
If you see a sign-in or change nobody on your team made:
Remove anyone who shouldn't have access, or change their permissions.
Ask the team member to change their password.
Email help@streamlinedpayments.com with the date, time, and activity from the log.
Who can use this feature?
Team members with Settings access
Available on all plans