How do I read the audit log?

Organization Settings → Audit log is a permanent record of sign-ins, user and role changes, settings changes, bulk exports and sends, and 2Labs support access. Filter it, and export it as CSV.

Go to Organization Settings → Audit log. Only an Org admin can see it. Entries cannot be edited or deleted, by anyone.

Each entry has four columns:

When — the date and time.
Who — the person's name and their role, such as Org admin or Org editor. Automatic changes show System. An entry made by 2Labs support is marked 2Labs Global admin.
What — what happened, such as Signed in, Invited a user, Changed terms and renewal rules, Voided an invoice, Exported records or Sent a bulk message. A detail line follows where there is one, such as the role given, the invoice number, or how many records were exported. Where a reason was given, it shows as Reason:. A few entries, such as those for events, show the name they were recorded under, like event.cancelled.
From — the IP address it came from.

Use the filter at the top to narrow the list: Everything, Sign-ins, Users and roles, Sessions signed out, Sign-in settings, Membership overrides and suspensions, Membership levels, Terms, renewal rules and notices, Invoices voided, Bulk exports, Bulk sends, 2Labs support access or Organization status.

Click Export CSV to download what the filter shows, up to 10,000 entries. You see Audit log exported. The export itself has been recorded here.