Audit log.

Scovant keeps an internal audit log of administrative and security-relevant actions as part of the platform's security practice. It is not a workspace-facing feature: entries are reviewed by Scovant's own administrators.

Logged events include:

• User sign-ins and OAuth identity links.
• Site and workspace creation / deletion.
• Scan and simulation triggers.
• Billing events (subscription changes, credit purchases).
• API token creation and revocation.
• Webhook creation and modification.

Retention: entries are kept for a bounded window (90 days by default) and archived to secure storage before being purged.