Overview

From Clio Operate 7.13, the audit log records what people do with the documents on a work item. Each preview, download, open, delete, upload and rename creates an audit entry. The entry shows who acted, when, on which document and in which repository.

Use these entries to answer compliance questions, for example who viewed a sensitive document before a hearing, or who removed a document from a matter.

What end-users need to know

End-users do not need to do anything. When you preview, download, open, delete, upload or rename a document on a work item, Clio Operate records the action against your name. People with permission to view audit history can see these entries.

Before you start

• To view audit entries, you need the Audit - View Audit History permission.
• Clio Operate records document actions from the upgrade to 7.13 onwards. Actions before the upgrade do not display in the audit log.
• There is nothing to configure. Clio Operate records the actions automatically.

What Clio Operate records

Every document action has the audit source Document Actions. The Event column in the audit log displays the event name.

Clio Operate records these actions in the documents on a work item, in the document preview, and in the related documents on tasks. Examples of these tasks are Prepare Document, Document Bundle and Document Expectation tasks.

What each entry contains

When you select an entry in the audit log, the Audit Details blade displays these fields.

Actions outside a work item

Some repositories are not linked to a work item. When a user acts on a document in one of these repositories, Clio Operate records the action against the repository instead. These entries do not display in the audit log of any work item.

What Clio Operate does not record

In Clio Operate 7.13, these actions do not create a document audit entry:

• Deleting a folder. Clio Operate records deleted documents only.
• Copying or moving a document.
• Attaching a document to a section of a document bundle.
• Opening a document from the Open in menu of a repository that links directly to its storage location. For example, Open in > Browser and Open in > App on a Microsoft SharePoint document do not create an entry. To record the open, use the Open button in the document preview.
• Actions that the system performs without a signed-in user.

Virtual Data Rooms keep their own audit trail. The new events do not replace or duplicate it.

View the document actions on a matter

The menus and the columns in the audit log depend on how your system is configured. The steps describe a standard matter.

1. Navigate to the matter.
2. In the matter ribbon, select More, then select Audit.
3. In the Audit Log, select the filter icon.
4. In the Edit filters blade, select Add filter.
5. In the first list, select Event. In the second list, select is.
6. In the third field, select the document events that you want to see, for example document-upload and document-delete.
7. Select Apply.
8. To see the full details of an entry, select the arrow at the end of its row.

The Audit Details blade displays the entry.

The list of events in the filter displays only the events that the audit log already contains. The Audit Log keeps your filter when you return to it. To display all entries again, select Clear filters.

Related articles

• Virtual Data Rooms Overview
• Compliance and Security