Audit and evidence
Append-only tables
An append-only AutessaDB table accepts new rows and reads but rejects every update and delete, for every caller. It is a one-way setting: it can be turned on but never off, and the schema can only grow. Use it for ledgers, consent records and audit trails your own apps write.
The problem
What problem does it solve?
Audit trails built on normal tables can be edited by anyone with write access, including a compromised integration. Immutability has to be enforced by the database, not by convention.
How it works
- 1
Create it append-only
Set appendOnly: true in the table schema at creation, which is the recommended time.
- 2
Write rows
Inserts and reads work as usual.
- 3
Everything else is refused
Update, batch update and delete are rejected for all callers, and column removal is rejected.
- 4
Read the flag
Every read returns appendOnly in the schema, so your app knows not to offer edit or delete.
Every option
Append-only tables: settings and options
| Setting | What it does |
|---|---|
| appendOnly | true makes the table write-once. One-way. |
| Schema | Can only grow; computed columns are restricted. |
| Table soft delete | Deleting a table is a soft delete with a 14-day grace period; list-deleted is your trash and restore brings it back. |
Permissions
Who can do what?
| Who | What they can do |
|---|---|
| Every caller, including Admins | Insert and read; never update or delete rows. |
| Table owner or ADMIN | Turn append-only on. |
FOR DEVELOPERS
What to know
- Set append-only at creation for ledger and audit tables, since it can never be turned off.
Connections
How Append-only tables connects to the rest of Autessa
Reports, policies and security questionnaires are on the Autessa Trust Center.
FAQ
Append-only tables: questions
Can an admin edit a row in an append-only table?
No. Updates and deletes are rejected for all callers.
Can I turn append-only off later?
No. It is a one-way setting.
What happens if someone deletes a table by mistake?
Table deletion is a soft delete with a 14-day grace period. Restore it from the trash within that window.
Get started with Append-only tables
An append-only AutessaDB table accepts new rows and reads but rejects every update and delete for every caller, and the setting can be turned on but never off.
Reports, policies and questionnaires live on the Autessa Trust Center.
100% customizable, code and all
Make Autessa Security & Compliance fully your own.
Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.
Start free and make it yours