A school runs on trust, and trust is easier to extend when it's verifiable. Settings → Audit log keeps a tamper-proof record in two feeds.
- Admin actions — high-value changes with who, what, and when: archiving a student, exporting data, sending a broadcast, changing settings.
- Sensitive access — one row per staff page-view of a sensitive surface: student health, discipline, HR compensation, payroll, and financial aid.
Parents viewing their own child are never logged — this is about staff access to records that deserve discretion. Grade edits have their own Grade changes log (under Records in the navigation), so the academic record has an audit trail of its own.
Reviewing the sensitive-access feed occasionally is a healthy habit — it usually shows exactly what you'd expect, which is the point.