Prompt logs, audit & security

Prompts and responses are not stored by default. Turn on prompt logging in Settings to keep them, encrypted, for 1–30 days and see them in each request's detail in Activity (inline images are reduced to a placeholder); purge them at any time.

The audit log in Settings records who created, rotated or revoked keys and changed the webhook, provider keys, settings, presets or organization members, with IP and time — organizations show their owner and admins the whole team's log.

Turn on email confirmation (Settings > Security) to require a 6-digit code before creating or rotating keys, granting the management scope, saving a webhook or provider key, or deleting an organization. A confirmation lasts 15 minutes.