FinShare writes every meaningful action to an append-only audit log. Entries can't be edited or deleted; the database enforces that, not just the application. The log records who did what, and when, so a requester and an owner can both show what was agreed and what was pulled.
What's recorded
Each entry has the action, who did it (a team member, an API key, an owner, FinShare itself, or Intuit), the time, the IP address and browser where there was one, and the request, round, approval or report it relates to.
Requests and approvals
| Action | Recorded when |
|---|---|
| Request created | You or an API key create a request. Includes the report types, access window and update setting. |
| Consent link issued | A new owner link is issued, and whether it was emailed. |
| Request viewed | The owner first opens the review page. |
| Owner connected QuickBooks | The owner finishes connecting at Intuit. |
| Approval granted | The owner approves. Includes their email, the access window and update setting they chose, the version of the wording they were shown, and every report with its dates. |
| Request declined | The owner declines. |
| Request cancelled | You cancel before approval. |
Pulls and downloads
| Action | Recorded when |
|---|---|
| Update requested | Someone asks for a refresh or roll forward, with its type, mode and period end. |
| Update approved or declined | The owner decides on an update. |
| Report pulled | A report is pulled. Includes its type, dates, basis, how many QuickBooks calls it took, a SHA-256 hash of the raw response, and whether it tied out. |
| Pull failed | A report couldn't be pulled, with the reason. |
| Round finished | A round is delivered, partly delivered or failed, with counts. |
| Report downloaded | Anyone downloads a file, with the format. |
| Raw response downloaded | Anyone downloads the raw QuickBooks data over the API. |
Access ending
| Action | Recorded when |
|---|---|
| Approval revoked | The owner or you end access early, with who did it. |
| Approval expired | The access window ends. |
| Connection disconnected | FinShare disconnects from a company and revokes its token, with the reason. |
| Connection needs reconnect | Intuit stops accepting the connection. |
| Owner reconnected QuickBooks | The owner reconnects. |
| Keep-alive refresh | FinShare refreshes an idle connection's token so Intuit doesn't expire it while an approval is live. |
Your account
Sign-ins, team invitations, members joining or being removed, role changes, organization renames, settings changes, template changes, API keys created or revoked, and webhook endpoints created or disabled.
What's never recorded
No financial figures and no tokens. A report entry says a Profit and Loss for October 2025 – September 2026 was pulled and tied out. It never says what net income was.
Where you can see it
The full log isn't shown in the dashboard or available over the API today. What you can see:
- Requesters: each request's Timeline shows when it was created, opened, approved, each round and its outcome, and when access ended.
- Owners: the manage page lists every report delivered under an approval, with its period and the date and time.
- Over the API:
GET /v1/requests/:idreturns the approval summary and every round with its reports.GET /v1/reports/:id/rawreturns the raw QuickBooks response with its fetch time and SHA-256 hash, so you can match it to what you were delivered.
Consent and audit records are kept for seven years. If you need records about a specific request, email support@finshare.io.