Data and records Interaction logging
Interaction logging
Interaction logging decides what your workspace keeps of each interaction with an AI service: which interactions, and whether their content. Content means the prompt, the response and the text of attachments.
The mode is stamped on each interaction as it arrives and applied once your policies have decided. Saving a new mode changes what happens to interactions from then on. It never rewrites the past.
Who can do it
Every member can read the page. Saving needs Manage workspace settings (settings:manage), which only the Owner role holds. Everyone else sees "You need permission to manage settings." beside a disabled Save.
Choose a mode
- Open Settings › Data › Interaction logging.
- Choose one of the eight cards. Each draws what it keeps of four sample interactions.
- Optionally choose a Redaction in logs mode.
- Choose Save. The footer reminds you: "Applies to interactions that arrive after you save."
The eight modes
| Mode | What it keeps |
|---|---|
| Full record | Everything, with content |
| Metadata only | Everything, no content |
| Content on match | Content only when matched. This is the default. |
| Evaluated only | Only evaluated, with content |
| Evaluated, no content | Only evaluated, no content |
| Evaluated, content on match | Only evaluated, content when matched |
| Matches only | Only matches, with content |
| Matches, no content | Only matches, no content |
Matched a policy means a policy's filter matched the interaction. Evaluated, no match means an Enabled or Monitor policy that covers this kind of interaction ran its filter on it, whether or not it matched. A match is always evaluated too.
The legend under the cards names the marks: Matched a policy, Evaluated, no match, Content kept, Metadata only and Not recorded.
Redaction in logs
Redaction in logs decides how stored content looks where a PII & Secrets policy applied: the prompt, the response and text extracted from attachments. It does not change what the model received; that is the policy's own Redact action. Content stored before a change keeps the mode it was stored under.
| Mode | What is stored |
|---|---|
| Permanent | Placeholders. Originals are never stored. |
| Restricted | Placeholders. Originals kept encrypted; each reveal is recorded. |
| Masked | Partly hidden. The rest of each value is never stored. |
| None | Stored as sent. |
The default is Restricted. A member with Reveal held values (Owner and Admin) can open the originals held under Restricted for one block of one interaction; the console writes an audit entry first. If your deployment has no credential encryption key, Restricted behaves as Permanent.
Switching from Restricted to Permanent opens Delete the held originals?: "Switching to Permanent deletes every original held under Restricted. Interactions already stored keep their placeholders, and nothing can be revealed again. This cannot be undone." Choose Switch to Permanent to go on.
The redaction control is disabled while the mode keeps no content.
What your plan can do to the card
Your plan counts interactions each month. See Plan and licence. The card shows three states.
- From 80% of the month's interactions, a warning shows "… of … interactions this month" and "At …, logging locks to … until …".
- At the limit, the card is locked. A block says "Logging is locked to … until …". The mode in force is badged Active · locked, your own choice is dashed and says when it comes back, and every other card, Redaction in logs and Save are off. The badge beside the title reads Limit reached.
- Under a plan that keeps less than some modes, the card says "The … plan keeps …" and "Modes that keep more are not on this plan." The modes it refuses are disabled with a lock.
If machines use a capture tactic that never collects content, the card says so: "3 machines use a capture tactic that never collects content." (with their number).
Every setting
| Setting | What it does | Default |
|---|---|---|
| Logging mode | One of the eight modes above. | Content on match |
| Redaction in logs | Permanent, Restricted, Masked or None. | Restricted |
When it goes wrong
- You need permission to manage settings. Only an Owner can save.
- Switching to Permanent deletes the originals held under Restricted. Confirm to continue. The API wants the confirmation the dialog collects.
- Changing workspace settings requires settings:manage in this workspace. You are not an Owner.
- A save is refused when this month's interactions are used up and the mode is locked, and when the plan keeps less than the mode you chose. The card explains which, in place.
With the API
Not available with an API key.