How AI activity appears on the audit trail

Find what a connected did, and when it was connected or cut off, on your workspace’s . You need the System Admin or Total Rewards Admin to open it; Reviewing the audit trail covers the page itself.

Changes a client makes

A change an AI client makes is recorded exactly as a change you make yourself: on the tab it belongs to, under your name, with each field’s value before and after. A a client submits for you appears on Comp cycles, and an employee record it corrects appears on Org changes and in that employee’s History. The entry also stores which connection made the change.

Connection entries

Each step in a connection’s life writes an entry on the Auth events tab. The entry names you and the client together, such as your name followed by Claude, with the time it happened.

Entry	When it’s written
connected an AI client	You approve a client for the first time.
reconnected an AI client	You approve a client you’ve connected before, for example after revoking it or after its connection expired.
revoked an AI client	You revoke a connection on the AI clients page.
AI client connection expired	A client tries to use a connection that has passed its 90 days. It’s written at most once every five minutes for the same connection.

Like every other auth event, these entries are kept for 400 days, and no entry is ever edited or deleted.

The assistant

The assistant beside each page is not an AI client, and asking it a question is not recorded. It only reads, it keeps no question or answer, and the audit trail has no entry for an ask.

Changing who can use the assistant is recorded. Turning it off or on for the whole workspace, or for a role, writes an entry on the Account activity tab under the name of the System Admin who changed it, with the time and the switch’s value before and after, such as Assistant: On → Off or Off for roles: none → Legal / Compliance Manager.