Payroll Audit Event Schema

Type of action performed

User UUID of the HR member who performed the action

Kind of resource the action targeted

UUID of the affected resource (record/period/user/export)

When the action concerns a specific employee, their profile UUID — supports per-employee audit queries (DSGVO-Auskunftsrecht).

YYYY-MM payroll period if the action is period-scoped

When the action happened (client clock — server stores its own createdAt)

Client IP captured by the server (filled by route handler, not client)

User-Agent header captured by the server

Free-text context (e.g. recovery reason, export filename hash, member-removal justification)