Where can I see who changed what in my store?
The security log lists changes to people, roles, payment details and sign-in. The notification log lists every alert sent.
Security log
Open Settings, then Team and security, then "Security log". It is for the owner only, and it is read-only: nobody can edit or delete a row. It shows the 200 latest events.
It records who was added, edited or removed, who got which role, changes to settings and payment details (only the names of the settings, never the values), two-step sign-in being turned on or off, the AI connection's key being issued, and sign-in lockouts. Use the "Type" filter to narrow it: users, roles, settings and payments, two-step verification, AI connection, sign-in. Press a row to see the detail.
The riskiest events, such as widening access, changing payment details, turning off two-step verification or issuing a connection key, also raise an alert to you.
Tip Seeing a change you did not make? Change the passwords and keys involved, remove the account you do not recognize, and turn on two-step verification. Then use "Talk to a person" in Pulse if you need help.
Notification log
Under Settings, Notifications, "Notification log" lists every alert the system sent, to which channel (your phone, the developer bot, a webhook) and whether it arrived or failed. It is kept for 90 days and can be filtered by channel and status. Where alerts go is set under "What is sent, to whom".
Questions
How long are security events kept?
Security events are kept for 730 days under Waise's data processing terms. The screen shows the latest 200.
Can a team member see the log?
No. Only the owner can open the security log.
Updated