diff --git a/deploy-manage/deploy/elastic-cloud/differences-from-other-elasticsearch-offerings.md b/deploy-manage/deploy/elastic-cloud/differences-from-other-elasticsearch-offerings.md
index d1706366941..dcb16a7fd45 100644
--- a/deploy-manage/deploy/elastic-cloud/differences-from-other-elasticsearch-offerings.md
+++ b/deploy-manage/deploy/elastic-cloud/differences-from-other-elasticsearch-offerings.md
@@ -65,7 +65,7 @@ These capabilities cover identity and access, security and networking, infrastru
| **Feature** | {{ech}} | Serverless projects| Notes |
|----------|----------------------|--------------------|--------|
| **[API keys](/deploy-manage/api-keys.md)** | ✅ | ✅ | Available across {{ech}} and Serverless using deployment/project and cloud API key types. |
-| **Audit logging** | ✅ | **Planned** | Anticipated in a future release |
+| **Audit logging** | ✅ | ✅ | Available in {{ech}} through [Stack audit logging](/deploy-manage/monitor/stack-audit-logging.md) and the [{{ecloud}} audit trail](/deploy-manage/monitor/cloud-audit-trail.md) ({{fedramp-mod}} only), and in {{serverless-short}} through the [Serverless audit trail](/deploy-manage/monitor/log-delivery/audit-trail.md) |
| **Authentication and SSO** | Deployment-level [authentication realms](/deploy-manage/users-roles/cluster-or-deployment-auth/authentication-realms.md) and organization-level [SAML SSO](/deploy-manage/users-roles/cloud-organization/configure-saml-authentication.md) | Organization-level [user management](/deploy-manage/users-roles/cloud-organization/manage-users.md) and [SAML SSO](/deploy-manage/users-roles/cloud-organization/configure-saml-authentication.md) | Serverless does not provide deployment-level realm configuration. |
| **BYO-Key for encryption at rest** | ✅ | **Planned** | Anticipated in a future release; data in Serverless is stored on cloud-provider encrypted object storage |
| **Cloud provider support** | - AWS
- GCP
- Azure | - AWS
- Azure
- GCP | - [{{ech}} regions](cloud://reference/cloud-hosted/regions.md)
- [Serverless regions](/deploy-manage/deploy/elastic-cloud/regions.md) |
diff --git a/deploy-manage/monitor/log-delivery/audit-trail.md b/deploy-manage/monitor/log-delivery/audit-trail.md
index 047fea0063f..829832b699c 100644
--- a/deploy-manage/monitor/log-delivery/audit-trail.md
+++ b/deploy-manage/monitor/log-delivery/audit-trail.md
@@ -1,6 +1,6 @@
---
navigation_title: Serverless audit trail
-description: Configure and explore audit trail log delivery for Elastic Cloud Serverless, including ignore filters, destinations, data streams, and investigation recipes.
+description: Set up audit logging for Elastic Cloud Serverless with audit trail log delivery, including ignore filters, destinations, data streams, and investigation recipes.
applies_to:
serverless: ga
products:
@@ -9,7 +9,7 @@ products:
# Serverless audit trail
-Audit trail is the first log type available for [log delivery](/deploy-manage/monitor/log-delivery.md) in {{serverless-full}}. Enabling it delivers audit logs to your selected destination project so you can track and investigate activity in the source project.
+In {{serverless-full}}, enable audit logging using the audit trail. This is the first log type available for [{{serverless-short}} log delivery](/deploy-manage/monitor/log-delivery.md), and enabling it delivers audit logs to your selected destination project so you can track and investigate activity in the source project.
## What's included