Permanent record of all Internal Application Tracking Numbers — read-only

Archived applicant documents — photos & signed agreements for hired staff

Pipeline applicants removed via abort or deletion — permanent record, read-only

Positions that were fully registered (fulfilled) or closed as rejected — auto-archived after 5-day hold on HR Ops Monitor

All applicants who have left the recruitment pipeline — hired, rejected, declined or aborted — with their full records

All closed, resolved and archived DDCP disciplinary cases — read-only permanent record

Enter a case reference number (e.g. DTTASA-DC-2026-0001) to pull up its sealed outcome document, or search by name, department or outcome.

Every HR report download — who authorised it, when, and why. Permanent audit trail.

Completed appraisals and performance reviews — permanent HR record

Every letter, agreement, and offer composed through the portal — full archive

Anonymous and identified concerns submitted via the whistleblowing channel.

Annual + ad-hoc CoI declarations from staff and governance.

DSAR requests under NDPA 2023 — track receipt, scope, response and outcome.

Intellectual-property assignments and non-disclosure agreements signed by staff.

DBS / safeguarding / regulated-role clearances and renewals.

User-initiated deletion queue under Apple 5.1.1(v) + NDPA right-to-erasure.

All historical probation records — passes, extensions, fails, terminations.

Investigator and case-worker notes — restricted-content metadata view.

Every modification to a user profile — who changed what, when.

Funder applications submitted via the portal — every grant on one page.

Approved comms posts, drafts and idea backlog from the comms board.

Recorded IT incidents — date, severity, owner, resolution.

Every time a Head of HR / Ops / SA republishes an already-published rota — week, admin, number of changes, full per-cell diff.

Permanent record of every Staff or Applicant account purge — issued by onOffboardingCompleted, deleteUserCompletely, and deleteApplicantCompletely. SA-only.

Every post-close headcount edit by HoHR or SA, with full reason. Driven by the editRecruitmentHeadcount Cloud Function. Read-only — actions stay where the change was made.

Every gated view of a staff member's sensitive personal data (home address, DOB, next-of-kin) — who viewed it, when, and the required reason they supplied. Read-only audit trail. Visible to SA / Exec / Head of HR.