Configuration changes are recorded: who made them, when, and what changed. That covers the things that decide whether an alert reaches anybody — roles, territories, store contacts, escalation, mutes and device assignments.
Deletions write a complete snapshot of the record BEFORE it's removed. So "somebody deleted a role and we don't know what was in it" has an answer — the snapshot contains what the role granted and who held it.
Credentials are never written into the audit trail. Device keys, pairing codes and acknowledgment tokens are excluded by design, and there is an automated check that fails the build if one is ever logged.
Acting on someone's behalf under temporary coverage is recorded as exactly that, so an incident review months later can tell who responded and in whose place.
Read next: Reading the activity log →