Export organization activity to Google Cloud Storage

You can now deliver recorded management activity from your Sanity organization and its projects to a Google Cloud Storage bucket you control. Activity Feed Export helps you retain activity history and ingest administrative events into your security and analysis tools.

Configure a destination in your organization's Activity feed export settings in Manage. Sanity generates hourly exports of the previous complete hour, starting at five minutes past each hour in UTC.

Event files contain gzip-compressed newline-delimited JSON using Open Cybersecurity Schema Framework (OCSF) version 1.9.0. A manifest lists the files for each completed window, including windows with no exported records.

The export covers recorded management activity such as membership and role changes, API token lifecycle, security configuration, and project and dataset administration. Document and asset content changes are outside this export's scope.

To configure delivery, see Export activity to Google Cloud Storage.

For the file format and event fields, see the Activity Feed Export data reference.