Log — the access & action record

The audit log

What it is — Every login and pay-affecting action, newest first: “who · when · IP · device · browser”. The hint reminds you it’s confidential.
Export CSV — Downloads the log as a spreadsheet. The export is built to be safe to open in Excel/Sheets (values that look like formulas are neutralised), because one column comes from the visitor’s browser and can’t be fully trusted.
Watch out — Device / IP / location are corroboration (“was this the usual phone?”), not proof of identity — a web app can’t read a real device ID, and a shared phone breaks the link. Identity comes from the signed-in account, not these fields. Empty reads “No activity logged yet.”