Audit trail

CommissionSight keeps an append-only audit trail of the actions taken on your account: who did what, to what, and when. It’s built for enterprise audit and compliance reviews — every state-changing action is recorded and can never be edited or deleted.

Read the audit trail

curl "https://api.commissionsight.com/v1/audit?limit=50" -H "Authorization: Bearer $TOKEN"

Query param	Notes
action	Optional. Filter to one action (e.g. file.upload).
limit, offset	Pagination (default limit=50, max 200).

{
  "data": [
    {
      "id": "…",
      "actor": "ada@brokerage.com",     // the signed-in user, or "API token"
      "action": "file.upload",
      "target": "file_abc123",           // the affected resource (id / email / carrier)
      "meta": { "carrierId": "car_1", "period": "2026-04" },
      "ip": "203.0.113.7",
      "createdAt": "2026-04-02T15:10:00.000Z"
    }
  ],
  "pagination": { "limit": 50, "offset": 0, "hasMore": true }
}

Newest first. actor is the user’s email when the action came from a signed-in session, or "API token" when it came through the API.

Recorded actions

action	When
file.upload / file.replace	A statement was uploaded (or replaced a corrected file).
file.retract	A period’s scored data was retracted.
file.purge	A raw file’s bytes were purged from storage.
rate.update / rate.delete	An expected commission rate was set or removed.
team.invite / team.remove	A teammate was invited or removed.
assistant.query	The AI assistant was asked a question.

In the app, the same events appear under Profile → Activity log.

The trail is account-scoped: a token only ever sees its own account’s events. Logging is best-effort and never blocks the action it records.