Audit Bot is for compliance with the law or your organization's guidelines. This service account allows you to read every conversation on your server, including encrypted conversations.
Audit Bot is only available on homeservers with the Element Enterprise Cloud plan.
Set Up Integration
Audit Bot can be configured to write all decrypted events in all rooms to an S3-compatible storage of your choice.
This is a continous export which will start with the configuration of a bucket and stop if you clear the configuration.
Messages from the past are not exported retrospectively.
You can use Element Web to log into the auditbot account:
Secure Backup Phrase (click to view)
Log in as Audit bot
Removing the integration will not cause the user auditbot to leave rooms.
This is a separate step to make mistakes easier to recover from.
If the integration was accidentally deactivated and Audit Bot left rooms as the last local Administrator in that room, such rooms can no longer be moderated by anyone and need to be abandoned. Those room also couldn't be rejoined by Audit Bot.
You can deactivate the auditbot account using the EMS Admin GUI or Synapse Admin API, if you want it to leave all rooms.