Audit trail
Go to Audit trail. The page is titled Immutable audit trail.
TillPoint writes an entry every time someone does something that matters: selling, refunding, approving, changing settings, editing staff, moving stock or buying. The audit trail is where owners, admins and auditors review those entries.
Who can see it
Section titled “Who can see it”Owners, admins and auditors can open the audit trail by default. Managers cannot, unless an owner or admin gives them the right. See Roles and permissions.
What each entry shows
Section titled “What each entry shows”| Column | What it shows |
|---|---|
| Date & time | When it happened. |
| Employee | The staff member who did it. |
| Action | What happened, for example STAFF CREATED, SALE CHECKED OUT, TERMINAL UNLOCK FAILED or APPROVAL PIN SUCCEEDED. |
| Record type | The kind of record affected, for example USER ACCOUNT, TERMINAL DEVICE or STAFF ROLE. |
| Details | The specifics, such as the record’s name, the reason given, and which fields changed from what to what. |
The newest entries are at the top. The page shows the most recent 1,000 entries for your business. Use the page controls at the bottom to move through them, and Refresh to load the latest.
Some details, such as buying prices, are only shown if you also have the right to see them. Otherwise the entry says Protected values require additional access.
What gets recorded
Section titled “What gets recorded”Examples of what you will find:
- Access — terminal unlocks and failed unlock attempts, locks, manager PIN approvals, and pauses after too many wrong approval PINs.
- Staff — accounts created, edited and deleted, rights and role changes, section access, profile photos and staff imports.
- Selling — sales, returns, printed bills and shifts opened and closed.
- Stock and purchasing — product changes, stock transfers, purchase orders, price changes, supplier invoices and supplier payments.
- Settings — terminals created, edited and deleted, restaurant settings, stock commitment changes, print agents and printer routes.
Actions that need a reason, such as deleting a staff account, deleting a terminal or removing items from an order, keep that reason in the entry.
Why it cannot be changed
Section titled “Why it cannot be changed”The audit trail is read-only. There is no button to edit or delete an entry, for anyone, including the owner. Deleting a staff account or terminal removes access but leaves its history in place.
That is what makes it useful: when cash is short or stock is missing, the record of who did what is the same record that was written at the time.
Checking one person’s activity
Section titled “Checking one person’s activity”To see everything one staff member did, open Users & roles and select Logs on their row. See Viewing a staff member’s activity.