Email audit listener