Changes to scales, templates, cycles, review assignments, overrides, probation outcomes, calibration sessions and improvement plans are kept in the system history.
Review text, ratings comments and peer comments are never written to the history, so confidential text is not copied anywhere else.
Every override, disposition, removal and cleared outcome needs a reason, and the reason is kept.
Attempts to open something without permission are refused and recorded for HR.