Skip to content
profflow
Contact sales

Legal document

Activity log

What Profflow records about the work done in a company’s account, who sees it, how long it is kept, and what it does not record.

Last updated
2 November 2026
Issued by
Profflow Analytics OÜ
Registry code
17552133
VAT
EE103006985

1What the log is

Every company in Profflow has its own activity log. It answers the question “who did what, and when” for everyone the company has let into its account: the owner, the CFO, the accountant and the manager.

2What is recorded

  • Data coming in — each bank statement, accounting, payroll, sales or e-MTA file imported and each connection read: when, the format, how many lines, how many were new and how many were refused.
  • Documents — invoices and bills created, issued, changed, cancelled, credited, sent, approved, scheduled for payment and put on a project; payments recorded; reminders sent to customers.
  • Payroll and people — employees added, salaries changed, bonuses added or removed, contracts ended, payroll periods approved, closed or reopened.
  • The company — company details, settings, bank rules and cash entered by hand.

Each entry has the time, the person’s email address and role in the company, the event and its details (for example an invoice number). Where there is no account, as in a test in a single browser, the entry says “This browser”.

3What is not in it

  • The contents of the financial data itself: the log says a statement with 240 lines was imported, not what the lines were.
  • Sign-ins. They are recorded by the sign-in service (Supabase, in the EU).
  • What a person only looked at. The log records changes, not reading.

4Who sees it

Everyone the company invited into its account sees the whole log in Settings → Activity log, can filter it by area and by person, and can download it as a CSV file. Nobody outside the company sees it in the product.

5Can it be changed

Entries are only added. The product has no way to change or delete a single entry, for any role. The log is kept with the rest of the company’s data and is part of Settings → Data → Download all data.

6How long it is kept

As long as the company’s data is kept. When the company deletes its data or its account, the log is deleted with it, as the data processing agreement describes.

7Independent review

No independent security audit of Profflow has been made yet. When one is made, its date, who made it and what it covered will be written here.

8Questions

Write to hello@profflow.ee. The data processing agreement is at profflow.ee/dpa, and how the data is protected at profflow.ee/security.