Team Audit LogImmutable record of admin / member actions for compliance.Tracked eventsmember.invite / member.remove / role.change policy.update billing.charge / billing.refund api_key.create / api_key.revoke sso.config_changeFieldsFieldDescriptiontimestampISO 8601 actorwho did it actionevent id targetresource ip / uaclient info resultsuccess / failRetentionTeam: 90 days Enterprise: 365 daysExport & SIEMCSV / JSON; webhook to Splunk / Datadog (Enterprise).