- every action is recorded in audit trail
- users cannot erase anything