Reading the access log
If watermarking tells you which copy leaked, the access log tells you who touched what, and when. Every material action in CoverQueue is recorded to an append-only audit trail you can filter and export.
What gets recorded
The log captures the events that matter for confidentiality and record-keeping:
- Submissions created and edited, files uploaded
- Scripts and coverage viewed and downloaded
- Share links created and revoked, and each external open
- Coverage started and signed
- Decisions recorded, and member changes
Each entry records the actor, the item, the timestamp, and (for external share-link access) the recipient label and IP.
2026-07-14 10:22 download GLASSHOUSE (script) Jane Smith / Acme · 203.0.113.7
2026-07-14 10:19 view GLASSHOUSE (coverage) Jane Smith / Acme
2026-07-13 16:40 sign GLASSHOUSE coverage Sam Rivera
Where to find it
There are two views:
- Per-submission timeline: the Activity tab on any submission, showing everything that happened to that script.
- Org-wide log: a filterable table by event type, actor, and date range, available to owners and execs, exportable as CSV.
External share-link access shows up within seconds. If you've just sent a packet, the org-wide log (or the link's own access history) is the fastest way to confirm it was opened.
Append-only by design
The audit log is append-only: there are no update or delete permissions on it, not even for the owner. That's what makes it trustworthy as a record. Nothing can be quietly rewritten after the fact.
Common questions
How long is history kept? The full audit history is retained on paid plans; the Free tier shows the most recent 30 days.
Can I export it? Yes. The org-wide log exports to CSV for owners and execs.
Who can see the org-wide log? Owners and execs. Every member still sees the per-submission Activity tab for submissions they can access.