diff --git a/acton-service/src/accounts/mod.rs b/acton-service/src/accounts/mod.rs
index ed5684e..ac91a90 100644
--- a/acton-service/src/accounts/mod.rs
+++ b/acton-service/src/accounts/mod.rs
@@ -695,7 +695,7 @@ mod audit_integration {
                 ),
                 AccountEvent::Expired { ref account_id } => (
                     AuditEventKind::AccountExpired,
-                    AuditSeverity::Notice,
+                    AuditSeverity::Warning,
                     serde_json::json!({ "account_id": account_id }),
                 ),
                 AccountEvent::Deleted { ref account_id } => (
diff --git a/acton-service/src/middleware/jwt.rs b/acton-service/src/middleware/jwt.rs
index ca60c4c..3b14876 100644
--- a/acton-service/src/middleware/jwt.rs
+++ b/acton-service/src/middleware/jwt.rs
@@ -270,7 +270,7 @@ impl JwtAuth {
                 logger
                     .log_auth(
                         crate::audit::event::AuditEventKind::AuthLoginSuccess,
-                        crate::audit::event::AuditSeverity::Informational,
+                        crate::audit::event::AuditSeverity::Notice,
                         source,
                     )
                     .await;
diff --git a/acton-service/src/middleware/paseto.rs b/acton-service/src/middleware/paseto.rs
index 838b0c2..f1e2197 100644
--- a/acton-service/src/middleware/paseto.rs
+++ b/acton-service/src/middleware/paseto.rs
@@ -283,7 +283,7 @@ impl PasetoAuth {
                 logger
                     .log_auth(
                         crate::audit::event::AuditEventKind::AuthLoginSuccess,
-                        crate::audit::event::AuditSeverity::Informational,
+                        crate::audit::event::AuditSeverity::Notice,
                         source,
                     )
                     .await;