Privacy & scope: This page is gated by the TEAL_OPERATOR_EMAILS env-var allowlist — only emails on that list can view the cross-tenant ("All tenants") feed. Everyone else (including signed-in customer admins) only sees events scoped to their own org via /api/auth/audit-list. TEAL never stores passwords (hashed or plain) — your customers' authentication credentials live with WorkOS or their corporate IdP. New-device and new-country sign-ins also fire a Postmark alert to TEAL_AUDIT_ALERT_TO when configured.