Audit logs collect key administrative and security events within your workspace, helping administrators track what actions took place, when they occurred, and who initiated them. For instructions on accessing, filtering, and exporting audit logs, see our main article on audit logs.
Event data details
When inspecting an individual event row or reviewing an exported log, each event includes the following metadata:
ID: The unique identifier of the event.
Created at: The exact date and time the event occurred.
Actor: The user who initiated the action. If an event was automatically triggered by the platform or an external service (e.g., automated background jobs or Stripe payment processing), this field displays System or LingoHub Robot.
Project: The target project associated with the event (if applicable).
Event data: Detailed JSON data containing the raw parameters and specific changes associated with the action.
Two separate logs exist, with separate endpoints and separate exports:
Workspace audit log: Everything a workspace administrator can review. All categories except USERS.
Personal account audit log: The signed-in user’s own account activity. The USERS category only.
Audit log event categories
Events are organized into 7 distinct categories. Below is a list of the categories and the tables with the types of actions tracked within each:
Workspaces
Members
Projects
API
Labels
TMS
Personal account audit log
Workspaces
Trigger name | Category / Target / Event | Scope | Description |
| WORKSPACES / GENERAL / CREATE | Workspace | Triggered when a workspace is created. |
| WORKSPACES / PROFILE / UPDATE | Workspace | Triggered when the workspace profile (title, URL) is updated. |
| WORKSPACES / SUBSCRIPTION / UPDATE | Workspace | Triggered when the workspace subscription changes (plan, quantity, billing period). |
| WORKSPACES / SUBSCRIPTION / CANCEL | Workspace | Triggered when the workspace subscription is cancelled. |
| WORKSPACES / SUBSCRIPTION / RENEW | Workspace | Triggered when a previously cancelled workspace subscription is renewed. |
| WORKSPACES / SUBSCRIPTION / ACTIVATE | Workspace | Triggered when a deactivated workspace is reactivated, for example after a failed payment is settled or an expired trial is converted. Recorded by the system, not by a user. |
| WORKSPACES / SUBSCRIPTION / DEACTIVATE | Workspace | Triggered when the workspace is deactivated, payment failure, trial expiry, subscription cancellation or internal deactivation. The reason is part of the entry data. Recorded by the system, not by a user. |
| WORKSPACES / BILLING_INFOS / CREATE | Workspace | Triggered when billing information is added for the first time. |
| WORKSPACES / BILLING_INFOS / UPDATE | Workspace | Triggered when billing information is updated. Also recorded when the payment provider reports changed customer details. Recorded by the system in that case. |
| WORKSPACES / INVOICES / CREATE | Workspace | Triggered when an invoice is created. Recorded by the system. |
| WORKSPACES / PAYMENTS / CREATE | Workspace | Triggered when an invoice payment succeeds. Recorded by the system on notification from the payment provider. |
| WORKSPACES / PAYMENTS / FAIL | Workspace | Triggered when an invoice payment fails. Recorded by the system on notification from the payment provider. |
| WORKSPACES / TEAM / CREATE | Workspace | Triggered when a team is created. |
| WORKSPACES / TEAM / UPDATE | Workspace | Triggered when a team is updated (name, description, colour, type, assigned LINA). |
| WORKSPACES / TEAM / DELETE | Workspace | Triggered when a team is deleted. |
| WORKSPACES / LINA / CREATE | Workspace | Triggered when a LINA is created. |
| WORKSPACES / LINA / UPDATE | Workspace | Triggered when a LINA is updated; engine, restriction, translation-memory matching, or any of its context toggles. |
| WORKSPACES / LINA / DELETE | Workspace | Triggered when a LINA is deleted. The LINA’s actor record is retained. |
| WORKSPACES / ROLE / CREATE | Workspace | Triggered when a workspace role is created. |
| WORKSPACES / ROLE / UPDATE | Workspace | Triggered when a workspace role is updated, including changes to its workspace or team permissions. |
| WORKSPACES / ROLE / DELETE | Workspace | Triggered when a workspace role is deleted. |
Members
Trigger name | Category / Target / Event | Scope | Description |
| MEMBERS / INVITATION / CREATE | Workspace | Triggered when a workspace invitation is created. |
| MEMBERS / INVITATION / ACCEPT | Workspace | Triggered when an invitation is accepted. Recorded by the system, as the acceptance happens outside the inviting workspace’s session. |
| MEMBERS / INVITATION / DECLINE | Workspace | Triggered when an invitation is declined. Recorded by the system. |
| MEMBERS / PERMISSION / UPDATE | Workspace | Triggered when a member’s workspace role is changed. |
| MEMBERS / GENERAL / DELETE | Workspace | Triggered when a member is removed from the workspace. |
Projects
Trigger name | Category / Target / Event | Scope | Description |
| PROJECTS / GENERAL / CREATE | Project | Triggered when a project is created. |
| PROJECTS / GENERAL / UPDATE | Project | Triggered when a project is updated (title, URL, website, AI context). |
| PROJECTS / GENERAL / DELETE | Project | Triggered when a project is deleted. |
| PROJECTS / LOCALES / DELETE | Project | Triggered when a project language is deleted. |
| PROJECTS / RESOURCES / DELETE | Project | Triggered when a resource is deleted. |
| PROJECTS / BACKUPS / DELETE | Project | Triggered when a backup is deleted. |
| PROJECTS / INTEGRATIONS / CREATE | Project | Triggered when a project integration is connected. |
| PROJECTS / INTEGRATIONS / UPDATE | Project | Triggered when a project integration’s settings change, like, branching, authentication, or plugin configuration. |
| PROJECTS / INTEGRATIONS / DELETE | Project | Triggered when a project integration is disconnected. |
API
Trigger name | Category / Target / Event | Scope | Description |
| API / KEYS / CREATE | Workspace | Triggered when an API key is created. |
| API / KEYS / UPDATE | Workspace | Triggered when an API key is updated, like, name, scope, expiry, or its workspace/team permissions. |
| API / KEYS / RESET | Workspace | Triggered when an API key’s token is reset. |
| API / KEYS / DEACTIVATE | Workspace | Triggered when an API key is deactivated. The deactivation reason is part of the entry data. Recorded by the system when deactivation is automatic, for example when a key’s owner loses access. |
| API / KEYS / DELETE | Workspace | Triggered when an API key is permanently deleted, including the scheduled cleanup of keys deactivated more than 90 days ago. The cleanup entries are recorded by the system. |
| API / KEYS / ENABLE | Workspace | Triggered when self-service API keys are enabled for the workspace. This is a workspace policy change, not an operation on a single key. |
| API / KEYS / DISABLE | Workspace | Triggered when self-service API keys are disabled for the workspace. Every user-owned key in the workspace is rejected from the next request onwards. |
| API / WEBHOOKS / CREATE | Workspace or project | Triggered when a webhook endpoint is created. Project-scoped when the endpoint is bound to a project. |
| API / WEBHOOKS / UPDATE | Workspace or project | Triggered when a webhook endpoint is updated, enabled, disabled, or its signing secret is rotated. The secret itself is never stored in the entry (see Entry data). |
| API / WEBHOOKS / DELETE | Workspace or project | Triggered when a webhook endpoint is deleted. |
Labels
Trigger name | Category / Target / Event | Scope | Description |
| LABELS / GENERAL / CREATE | Workspace | Triggered when a label is created. |
| LABELS / GENERAL / UPDATE | Workspace | Triggered when a label is updated. Also recorded when labels are merged, the surviving label produces this entry, and the merged-away labels do not produce delete entries. |
| LABELS / GENERAL / DELETE | Workspace | Triggered when a label is deleted. |
TMS
Trigger name | Category / Target / Event | Scope | Description |
| TMS / GLOSSARIES / CREATE | Workspace | Triggered when a glossary is created. |
| TMS / GLOSSARIES / UPDATE | Workspace | Triggered when a glossary is updated. Individual glossary terms are not audited. |
| TMS / GLOSSARIES / DELETE | Workspace | Triggered when a glossary is deleted. |
| TMS / GLOSSARIES / IMPORT | Workspace | Triggered when a glossary is imported. |
| TMS / GLOSSARIES / EXPORT | Workspace | Triggered when a glossary is exported. |
| TMS / TRANSLATION_MEMORIES / UPDATE | Workspace | Triggered when a translation memory is updated. |
| TMS / TRANSLATION_MEMORIES / EXPORT | Workspace | Triggered when a translation memory is exported. |
| TMS / STYLE_GUIDES / CREATE | Workspace | Triggered when a style guide is created. Also recorded for the default style guide created with a new workspace, that one is recorded by the system. |
| TMS / STYLE_GUIDES / UPDATE | Workspace | Triggered when a style guide is updated. |
| TMS / STYLE_GUIDES / DELETE | Workspace | Triggered when a style guide is deleted. |
Personal account audit log
Trigger name | Category / Target / Event | Description |
| USERS / GENERAL / CREATE | Triggered when a user account is created. |
| USERS / GENERAL / UPDATE | Triggered when account details change, including a pending email change. |
| USERS / PROFILE / UPDATE | Triggered when the user’s profile is updated. |
| USERS / PASSWORD / UPDATE | Triggered when the user changes their password. Switching from social login to email/password is recorded here too. |
| USERS / PASSWORD / RESET | Triggered when the password is set through the reset flow. |
| USERS / TWO_FACTOR / ENABLE | Triggered when two-factor authentication is enabled. |
| USERS / TWO_FACTOR / CONFIRM | Triggered when two-factor authentication setup is confirmed. |
| USERS / TWO_FACTOR / DISABLE | Triggered when two-factor authentication is disabled. |
| USERS / WORKSPACE / DELETE | Triggered when the user deletes a workspace. Recorded in the acting user’s personal log, not in the deleted workspace’s log. |
Need more help?
Couldn't find what you were looking for? We are here to help! Reach out to our team at [email protected], and we will gladly assist you.

