Every action recorded with timestamps and actor details. Tamper-proof by design.
Regulators need proof that records haven't been tampered with.
Every create, edit, submit, approve, and reject action is recorded with timestamps and actor identity in an immutable audit log.