Open Settings → Privacy and scroll to Decrypt history. The list shows recorded decryptions by Penny's service, including the time, reason, service identity, and number of operations.
Routine reasons include reading memory through an AI connection, opening it in the dashboard, exporting data, and automated memory processing. Seeing a routine row does not by itself mean a support employee opened your notes.
Use Show anomalous only to focus on access outside routine operation. These reasons include support troubleshooting, incident investigation, legal demands, compliance audits, and key rotation. The distinction is the purpose of the access.
Routine access is sealed into daily commitments on the public transparency log. Out-of-the-ordinary access has an individual public entry. A log link may initially show pending while publication is completing. Follow an available public-log link to see its entry.
If you see an unfamiliar reason or a mismatch message, contact support with the time and displayed reason. You do not need to include the contents of the note.
The history covers content decryption by the running service. Key unwrap records live in AWS CloudTrail, and offline backup restores sit outside this dashboard record. The public log contains accountability metadata and fingerprints, not your memory text.