Who did what
Audit logs
When a mark is challenged or a minute is questioned, the university needs to know who did what and when. Oxonia is designed to keep that record.
About this page
Last updated: 10 October 2026.
This page describes how the Oxonia platform is designed to work. It is not a certification or an audit report. Our contractual commitments are in each university's order form, the data processing agreement and the service level agreement.
What is recorded
The platform is designed to record important actions, including:
- Sign-ins and sign-outs.
- Changes to roles and permissions in the admin console.
- Changes to settings, sign-in methods and AI keys.
- Approval of exam scripts and release of results in Oxonia Mark.
- Re-marks and appeals.
- Editing, approval and e-signing of minutes in Oxonia Senate.
- Approval of policies and changes to the AI-use register in Oxonia Policy.
- Sign-off of regulator returns in Oxonia Nexus.
- Approvals for leave, purchases and travel in Oxonia Office.
Why it matters to a university
- Appeals. When a student appeals a mark, the exams office can show who marked, who approved and what changed.
- Governance. The secretary can show how a minute moved from draft to signed record.
- Regulators. The quality office can show who prepared and signed a return.
- Internal audit. Auditors can check who had which role and when.
AI drafts and human decisions
Oxonia keeps a clear line between what AI drafted and what a person decided. A mark draft from Oxonia Mark quotes the words that earned it and shows a confidence score. The approval belongs to a named examiner. The log is designed to show both. See How AI drafts are approved.
Built-in registers
Some products keep their own registers as part of their work. Oxonia Senate keeps resolutions and actions registers. Oxonia Office keeps a letters register and tracks read receipts on circulars. Oxonia Policy keeps an incidents log and an AI-use register. These sit alongside the audit log.
Who can see logs
Access to audit logs is designed to be limited to admins and people the university chooses, such as internal audit. Auditors can be given time-limited access through the audit room in Oxonia Policy.
How long logs are kept
By default, audit logs are kept for the life of the university's account, and admins can export them as CSV. A university can set a different period in its order form. See the data processing agreement.
Related