How to Export the QuickBooks Online Audit Log Before It's Deleted

The audit log is the one part of your QuickBooks Online company that records not what your books say, but what happened to them: who signed in, who changed a transaction, who deleted one, and when. It is also the part QuickBooks holds for the shortest time. Intuit keeps the audit log for only two years, and it disappears entirely when your account is deleted after cancellation. If you ever need to show what really happened in your books, the time to export the log is before either of those deadlines passes.

What the audit log actually records

Every QuickBooks Online company keeps an audit log automatically, and every user's actions land in it. It captures who created, edited, or deleted each transaction, the before and after values of a changed entry, when users signed in, and changes to settings and connected apps. Each event carries a user name and a timestamp, so the log reads as a running history of the account rather than a snapshot of its current numbers.

The reports you export show the current state of the books. The audit log shows the sequence of changes that produced it.

Why the audit log is worth keeping

For an active business the log is a background utility, useful mainly for catching a bookkeeping mistake or confirming who entered something. It matters more later, in the situations where someone questions the books:

• A dispute with a former bookkeeper or partner over what was changed, and when.
• A suspected case of fraud or embezzlement, where the pattern of edits and deletions is often the evidence.
• An exam or review that raises questions about whether entries were altered after the fact.
• A sale or due-diligence process, where a buyer wants assurance the books were not quietly rewritten.

In each of these, the totals in a report are not enough on their own. What people want to see is the history of changes, and that history lives only in the audit log.

The two deadlines you are working against

Two separate clocks limit how much of the log you can ever recover.

The first applies even while you are paying. Intuit retains the audit log for two years, so anything older than roughly 24 months has already aged out of the log inside a live, active company. A business that has been on QuickBooks for a decade does not have a decade of audit history available; it has the last two years.

The second applies after you cancel. A cancelled paid company stays in read-only mode for 12 months and is then permanently deleted, a trial gets just 90 days, and the audit log goes with it. Support cannot restore a deleted company, so once that year passes the log is gone along with everything else. Our guide to what happens to your QuickBooks Online data when you cancel walks through that timeline in full.

Put together, the window to capture the audit log is narrower than for any other part of your books. The reports and the ledger cover your full history; the log covers only its most recent two years, and only until the account is deleted.

How to export the audit log

The export itself is straightforward, with one constraint that catches people. From inside QuickBooks Online:

1. Open Settings (the gear icon) and choose Audit Log.
2. Use the Filter controls to narrow by user, date, and event type. Filtering by date is the step that makes a complete export possible.
3. Review the results, then use the export option to download them.

QuickBooks exports the audit log as a CSV file, 150 rows at a time. There is no PDF or Excel option, and no single click that pulls the entire history at once. For any real company, 150 rows covers a short span of activity, so a complete export means working through the log in batches.

Batching the export by date

Because each export tops out at 150 rows, the practical method is to work backward through date ranges. Set the date filter to a narrow window, one month or one quarter depending on how active the account is, export that range to CSV, then move the window back and repeat until you reach the two-year edge of the log. Name each file by its date range so the batches reassemble in order.

This is tedious on a busy company, where a single month can exceed 150 rows and force you to split the range further. Budget real time for it, and confirm the last batch actually reaches back two years, since that is as far as the log goes.

If you are closing the company

When you are winding a business down and plan to cancel QuickBooks, the audit log deserves its own line on the checklist, separate from the reports and the ledger. The standard exports do not include it: QuickBooks' Export Data tool covers reports and lists but leaves the audit log out, so pulling it is a manual job you have to remember to do.

Do it while the subscription is still active, or early in the read-only year, rather than at the end, ideally as part of a full pre-cancellation backup pass. The two-year retention means the oldest history is already unrecoverable, and waiting until the read-only window is closing risks losing the rest. For a fuller picture of what that post-cancellation year does and does not allow, see our guide to QuickBooks Online's read-only year.

Keeping the log with the rest of your archive

An exported audit log is most useful sitting alongside the general ledger and the attachments it refers to, so that a changed or deleted transaction in the log can be traced to the entry and the document behind it. Building that on your own means exporting the log in date batches, exporting the ledger and reports separately, pulling the attachments, and tying the three together by hand.

Doing all of it, verified against the live books and delivered as one file, is the service we run: the complete ledger, every report in cash and accrual, every attachment linked to its transaction, and the audit log, captured before you cancel so nothing ages out or gets deleted with the account.

Whichever way you handle it, the two-year retention is the fact to plan around. Even in a fully paid, active account, QuickBooks is already dropping audit history older than 24 months, so the log you can export today is the most complete version of it you will ever have.