Every row below carries a unique codestring, a severity (the value the security console uses for ranking), and a one-line description aimed at compliance and security teams. Use your browser's find shortcut (Cmd / Ctrl + F) to jump to any code, or follow the table-of-contents links on the right rail to walk a single domain end-to-end.
Account
Profile, preferences, personal-access tokens.
| Code | Description | Severity |
|---|---|---|
| ACCOUNT_PROFILE_UPDATE | User-editable profile fields changed (display name, time-zone, locale). | Info |
| ACCOUNT_AVATAR_UPDATE | User uploaded or removed their profile picture. | Info |
| ACCOUNT_PREFERENCES_UPDATE | Theme, notification, or accessibility preferences changed. | Info |
| ACCOUNT_NOTIF_PREFERENCE_UPDATE | Per-channel notification preference (email, in-app) toggled. | Info |
| ACCOUNT_PAT_CREATED | A personal-access token was issued. | Notice |
| ACCOUNT_PAT_REVOKED | A personal-access token was revoked. | Notice |
| ACCOUNT_LOGIN_ALERT_PREF_UPDATE | Sign-in alert preferences changed. | Notice |
| ACCOUNT_NOTIF_INBOX_READ | Daily aggregate of inbox-read activity (not per-row). | Info |
| ACCOUNT_NOTIF_INBOX_MARKED_READ | Bulk mark-as-read action against the inbox. | Info |
| ACCOUNT_AUDIT_LOG_EXPORTED | A workspace administrator exported the audit log. | Warning |
| ACCOUNT_SECURITY_ALERT_ACKNOWLEDGED | A workspace administrator acknowledged a security alert. | Info |
Sessions
Per-session lifecycle + revocation.
| Code | Description | Severity |
|---|---|---|
| ACCOUNT_SESSION_REVOKED | An individual session was revoked. | Warning |
| ACCOUNT_SESSIONS_REVOKED_ALL | All sessions for the user were revoked. | Warning |
Multi-factor authentication
Authenticator app, hardware key, recovery codes.
| Code | Description | Severity |
|---|---|---|
| ACCOUNT_MFA_ENROLLED | User enrolled a multi-factor method (legacy code; new flows emit ACCOUNT_MFA_DEVICE_ENROLLED). | Notice |
| ACCOUNT_MFA_DEVICE_ENROLLED | A new authenticator app or hardware key was registered. | Notice |
| ACCOUNT_MFA_DEVICE_VERIFIED | An enrolled device successfully completed a challenge. | Info |
| ACCOUNT_MFA_DEVICE_RENAMED | User renamed an enrolled device. | Info |
| ACCOUNT_MFA_DEVICE_REVOKED | An enrolled device was revoked. | Warning |
| ACCOUNT_MFA_DEVICE_REVOKE_BLOCKED | A revoke attempt was blocked by the last-factor guard. | Warning |
| ACCOUNT_MFA_RECOVERY_CODES_GENERATED | A new batch of recovery codes was generated. | Notice |
| ACCOUNT_MFA_RECOVERY_CODE_USED | A recovery code was redeemed for sign-in. | Warning |
| ACCOUNT_MFA_DISABLED | All MFA was disabled on the account. | Critical |
| ACCOUNT_MFA_DISABLE_BLOCKED | Disabling MFA was blocked by tenant policy. | Warning |
| ACCOUNT_MFA_LEGACY_MIGRATED | A legacy single-device enrollment was promoted to the multi-device model. | Notice |
| TENANT_MFA_POLICY_UPDATED | Workspace MFA policy was updated by an administrator. | Notice |
| TENANT_MFA_REQUIREMENT_ENFORCED | MFA-required signal applied during sign-in. | Notice |
| TENANT_MFA_GRACE_GRANTED | A grace period was granted to enroll MFA. | Notice |
| TENANT_MFA_GRACE_EXPIRED | An MFA grace period elapsed without enrollment. | Warning |
| TENANT_MFA_ACCEPTED_FACTORS_UPDATED | The list of acceptable MFA factors was changed (e.g. phishing-resistant-only). | Notice |
WebAuthn / Passkeys
Phishing-resistant credentials.
| Code | Description | Severity |
|---|---|---|
| ACCOUNT_WEBAUTHN_CREDENTIAL_ENROLLED | A passkey or hardware credential was registered. | Notice |
| ACCOUNT_WEBAUTHN_CREDENTIAL_VERIFIED | A passkey successfully completed an assertion. | Info |
| ACCOUNT_WEBAUTHN_CREDENTIAL_RENAMED | A passkey was renamed. | Info |
| ACCOUNT_WEBAUTHN_CREDENTIAL_REVOKED | A passkey was revoked. | Warning |
| ACCOUNT_WEBAUTHN_CREDENTIAL_REVOKE_BLOCKED | A revoke was blocked by the last-factor guard. | Warning |
| ACCOUNT_WEBAUTHN_SIGNIN_SUCCESS | Passkey sign-in succeeded. | Info |
| ACCOUNT_WEBAUTHN_SIGNIN_FAILED | Passkey sign-in failed verification. | Warning |
| ACCOUNT_WEBAUTHN_COUNTER_REGRESSION | A passkey returned a sign counter that went backward — possible cloning. | Critical |
| ACCOUNT_WEBAUTHN_ENROLL_BLOCKED_BY_POLICY | Passkey enrollment was blocked by the workspace attestation policy. | Warning |
Step-up authentication
Fresh-MFA challenges for high-impact actions.
| Code | Description | Severity |
|---|---|---|
| ACCOUNT_STEPUP_CHALLENGE_REQUESTED | A high-impact action requested a fresh-MFA proof. | Info |
| ACCOUNT_STEPUP_VERIFIED | Step-up challenge succeeded. | Info |
| ACCOUNT_STEPUP_FAILED | Step-up challenge failed. | Warning |
| ACCOUNT_STEPUP_REUSED | A step-up token was redeemed twice — possible replay attempt. | Critical |
| ACCOUNT_STEPUP_BLOCKED | A step-up attempt was blocked by tenant policy. | Warning |
SAML single sign-on
Identity-provider configuration + sign-in flow.
| Code | Description | Severity |
|---|---|---|
| TENANT_SAML_PROVIDER_CREATED | An identity provider was added. | Notice |
| TENANT_SAML_PROVIDER_UPDATED | An identity provider's configuration was changed. | Notice |
| TENANT_SAML_PROVIDER_ENABLED | An identity provider went live for sign-in. | Notice |
| TENANT_SAML_PROVIDER_DISABLED | An identity provider was paused. | Notice |
| TENANT_SAML_PROVIDER_DELETED | An identity provider was deleted. | Warning |
| ACCOUNT_SAML_SIGNIN_SUCCESS | A SAML sign-in succeeded. | Info |
| ACCOUNT_SAML_SIGNIN_FAILED | A SAML sign-in attempt was rejected. | Warning |
| ACCOUNT_SAML_JIT_PROVISIONED | A new user was just-in-time provisioned on first SAML sign-in. | Notice |
SCIM provisioning
Automated user lifecycle from your directory.
| Code | Description | Severity |
|---|---|---|
| TENANT_SCIM_TOKEN_CREATED | A SCIM bearer token was issued. | Notice |
| TENANT_SCIM_TOKEN_REVOKED | A SCIM bearer token was revoked. | Notice |
| ACCOUNT_SCIM_USER_CREATED | A user was provisioned via SCIM. | Info |
| ACCOUNT_SCIM_USER_UPDATED | A user was updated via SCIM. | Info |
| ACCOUNT_SCIM_USER_DEACTIVATED | A user was deactivated via SCIM. | Warning |
| ACCOUNT_SCIM_USER_REACTIVATED | A user was reactivated via SCIM. | Notice |
Network policy
IP allowlist / blocklist enforcement.
| Code | Description | Severity |
|---|---|---|
| TENANT_NETWORK_POLICY_UPDATED | The workspace network policy (allowlist/blocklist) was changed. | Notice |
| TENANT_NETWORK_RULE_ADDED | A network rule was added. | Notice |
| TENANT_NETWORK_RULE_REMOVED | A network rule was removed. | Notice |
| ACCOUNT_NETWORK_POLICY_BLOCKED | A request was blocked by the workspace network policy. | Warning |
| ACCOUNT_NETWORK_POLICY_ADMIN_BYPASS | An administrator bypassed the network policy for a one-time action. | Warning |
Attestation policy
WebAuthn authenticator restrictions.
| Code | Description | Severity |
|---|---|---|
| TENANT_ATTESTATION_POLICY_UPDATED | The workspace's WebAuthn attestation allowlist was changed. | Notice |
Event webhooks
Outbound HMAC-signed event delivery.
| Code | Description | Severity |
|---|---|---|
| TENANT_WEBHOOK_CREATED | A webhook subscription was created. | Notice |
| TENANT_WEBHOOK_UPDATED | A webhook subscription was updated. | Notice |
| TENANT_WEBHOOK_DISABLED | A webhook subscription was disabled. | Notice |
| TENANT_WEBHOOK_DELETED | A webhook subscription was deleted. | Notice |
| TENANT_WEBHOOK_CIRCUIT_TRIPPED | A webhook circuit breaker tripped after repeated failures. | Warning |
| TENANT_WEBHOOK_TEST_SENT | A test event was delivered to a webhook endpoint. | Info |
Audit-log retention
Per-category retention windows + prune cron.
| Code | Description | Severity |
|---|---|---|
| TENANT_AUDIT_RETENTION_POLICY_UPDATED | Per-category retention windows were changed. | Notice |
| AUDIT_PRUNE_RUN_COMPLETED | Daily retention prune cron completed; the metadata carries which categories pruned and how many rows fell out. | Info |
| AUDIT_PRUNE_RUN_FAILED | Daily retention prune cron failed. | Warning |
Data erasure
Right-to-erasure workflow + holds.
| Code | Description | Severity |
|---|---|---|
| ACCOUNT_DATA_EXPORT_REQUEST | The user requested a copy of their data. | Notice |
| ACCOUNT_DATA_EXPORT_READY | A data export is ready to download. | Info |
| ACCOUNT_DATA_EXPORT_DOWNLOADED | A prepared data export was downloaded. | Info |
| ACCOUNT_DELETION_REQUEST | The user requested account erasure. | Notice |
| ACCOUNT_DELETION_APPROVED | An administrator approved the erasure request. | Notice |
| ACCOUNT_DELETION_REJECTED | An administrator rejected the erasure request. | Warning |
| ACCOUNT_DELETION_CANCELLED | An erasure request was cancelled before completion. | Info |
| ACCOUNT_DELETION_COMPLETED | An erasure was fully completed. | Warning |
| ACCOUNT_DELETION_BLOCKED_BY_HOLDS | Erasure could not complete because a module reported a regulatory retention hold. | Warning |
| ACCOUNT_DELETION_HOLDS_OVERRIDDEN | An administrator overrode retention holds to force completion (10-year retention on this row per SOX § 802). | Critical |
| ACCOUNT_DELETION_DUAL_CONTROL_BLOCKED | Completion was blocked because the completer is the same administrator who approved. | Warning |
| ACCOUNT_DELETION_COOLOFF_BLOCKED | Completion was blocked because the cooling-off window had not yet elapsed. | Warning |
HCM self-service
Employee profile, demographics, contact lifecycle.
| Code | Description | Severity |
|---|---|---|
| HCM_EMPLOYEE_PROFILE_UPDATE | An employee updated their HCM profile (preferred name, pronouns, emergency contact, etc.). | Info |
| HCM_EMPLOYEE_CONTACT_UPDATE | Employee updated their phone, address, or contact preferences. | Info |
| HCM_EMPLOYEE_DEMOGRAPHICS_UPDATE | Employee updated their self-identified demographics (gender, ethnicity, disability, veteran status). | Notice |
| HCM_EMPLOYEE_EMERGENCY_CONTACT_UPDATE | Employee updated their emergency contact. | Info |
HCM time-off
Time-off requests, balances, FMLA/CFRA tracking.
| Code | Description | Severity |
|---|---|---|
| HCM_TIMEOFF_REQUEST_SUBMITTED | Employee submitted a time-off request. | Info |
| HCM_TIMEOFF_REQUEST_APPROVED | A manager approved a time-off request. | Info |
| HCM_TIMEOFF_REQUEST_REJECTED | A manager rejected a time-off request. | Notice |
| HCM_TIMEOFF_REQUEST_CANCELLED | An employee cancelled a time-off request before completion. | Info |
| HCM_TIMEOFF_BALANCE_ADJUSTED | An HR administrator adjusted a balance outside the accrual engine — always reviewed. | Warning |
| HCM_TIMEOFF_FMLA_ELIGIBILITY_CHECK | FMLA / CFRA eligibility evaluated against the rolling 12-month window. | Info |
| HCM_TIMEOFF_INTERMITTENT_DAY_CLAIMED | An intermittent FMLA day was recorded against an active claim. | Info |
HCM payroll
Pay slips, paychecks, voids, garnishments.
| Code | Description | Severity |
|---|---|---|
| HCM_PAYSLIP_VIEWED | An employee viewed a pay slip. | Info |
| HCM_PAYSLIP_DOWNLOADED | An employee downloaded a pay slip as PDF. | Info |
| HCM_PAYSLIP_VOIDED | An HR administrator voided a previously-issued pay slip — always reviewed. | Warning |
HCM banking
Direct deposit, NACHA prenote.
| Code | Description | Severity |
|---|---|---|
| HCM_BANK_ACCOUNT_ADDED | An employee added a bank account to their direct-deposit allocation. | Notice |
| HCM_BANK_ACCOUNT_REMOVED | An employee removed a bank account from their direct-deposit allocation. | Notice |
| HCM_BANK_ACCOUNT_ALLOCATION_UPDATE | Direct-deposit percentage / flat-amount split changed. | Info |
| HCM_BANK_ACCOUNT_PRENOTE_SENT | NACHA prenote (zero-dollar test) sent to a new account. | Info |
| HCM_BANK_ACCOUNT_PRENOTE_VERIFIED | NACHA prenote came back verified; account is live for direct deposit. | Info |
| HCM_BANK_ACCOUNT_PRENOTE_REJECTED | NACHA prenote was rejected by the bank; account stays disabled. | Warning |
HCM benefits
Enrollment, life events, COBRA, FSA/HSA, EDI 834.
| Code | Description | Severity |
|---|---|---|
| HCM_BENEFITS_ENROLLMENT_STARTED | Employee opened the open-enrollment wizard. | Info |
| HCM_BENEFITS_ENROLLMENT_SUBMITTED | Employee submitted their open-enrollment elections. | Notice |
| HCM_BENEFITS_LIFE_EVENT_FILED | Employee filed a qualifying life event for mid-year change. | Notice |
| HCM_BENEFITS_LIFE_EVENT_APPROVED | HR approved a life event with documentation review. | Notice |
| HCM_BENEFITS_LIFE_EVENT_REJECTED | HR rejected a life event request. | Notice |
| HCM_BENEFITS_COBRA_OFFERED | COBRA continuation was offered after a qualifying event. | Notice |
| HCM_BENEFITS_COBRA_ELECTED | Former employee elected COBRA continuation. | Notice |
| HCM_BENEFITS_FSA_HSA_CONTRIBUTION_UPDATE | FSA / HSA per-pay-period contribution amount changed. | Info |
HCM equity
Grants, vesting, § 83(b), cosign workflow.
| Code | Description | Severity |
|---|---|---|
| HCM_EQUITY_GRANT_VIEWED | An employee viewed their equity grant detail. | Info |
| HCM_EQUITY_GRANT_ACCEPTED | Grantee accepted an equity grant. | Notice |
| HCM_EQUITY_VEST_RECORDED | A scheduled vest tranche was recorded. | Info |
| HCM_EQUITY_83B_ELECTION_FILED | Grantee filed an IRS § 83(b) election — irrevocable, 30-day window from grant. | Warning |
HCM year-end tax forms
W-2, 1099, T4, 1095-C generation, seal, transmit.
| Code | Description | Severity |
|---|---|---|
| HCM_YEAREND_FORM_GENERATED | A W-2 / 1099 / T4 / 1095-C form was generated for an employee. | Info |
| HCM_YEAREND_CONSENT_RECORDED | Employee gave IRS § 31.6051-1(j) electronic-delivery consent. | Notice |
| HCM_YEAREND_FORM_VIEWED | Employee viewed their year-end form. | Info |
| HCM_YEAREND_FORM_DOWNLOADED | Employee downloaded their year-end form. | Info |
HCM learning
Course enrollment, cmi5/xAPI launch, badges.
| Code | Description | Severity |
|---|---|---|
| HCM_LEARNING_ENROLLMENT_CREATED | Learner enrolled in a course. | Info |
| HCM_LEARNING_COURSE_LAUNCHED | Learner launched a cmi5 / xAPI course session. | Info |
| HCM_LEARNING_COURSE_COMPLETED | A course completion was recorded (xAPI Completed verb). | Notice |
| HCM_LEARNING_CERTIFICATE_ISSUED | A completion certificate was issued. | Notice |
| HCM_LEARNING_BADGE_AWARDED | A learning badge was awarded to the learner. | Info |
HCM expenses
Expense submission, approval, reimbursement.
| Code | Description | Severity |
|---|---|---|
| HCM_EXPENSE_REPORT_SUBMITTED | Employee submitted an expense report. | Info |
| HCM_EXPENSE_REPORT_APPROVED | Manager approved an expense report. | Info |
| HCM_EXPENSE_REPORT_REJECTED | Manager rejected an expense report. | Notice |
| HCM_EXPENSE_REPORT_REIMBURSED | An expense report was reimbursed via payroll. | Info |
| HCM_EXPENSE_POLICY_VIOLATION | A line item violated the workspace's expense policy and was flagged for manager review. | Warning |
HCM goals
Personal + team goals, AI SMART parsing, alignment.
| Code | Description | Severity |
|---|---|---|
| HCM_GOAL_CREATED | An employee or manager created a new goal. | Info |
| HCM_GOAL_UPDATED | A goal's progress, weight, or due date changed. | Info |
| HCM_GOAL_ALIGNED | A child goal was aligned to a parent goal in the alignment tree. | Info |
| HCM_GOAL_COMPLETED | A goal was marked complete. | Info |
HCM performance
1:1 check-ins, 360 feedback, calibration outcomes.
| Code | Description | Severity |
|---|---|---|
| HCM_1ON1_CREATED | A 1:1 check-in series was created between a manager and an employee. | Info |
| HCM_1ON1_NOTE_SAVED | A 1:1 note was saved (shared or private). | Info |
| HCM_FEEDBACK_360_REQUESTED | A 360-feedback request was sent. | Notice |
| HCM_FEEDBACK_360_SUBMITTED | Anonymous 360-feedback was submitted (k-anonymity enforced; reveal blocked below the threshold). | Info |
| HCM_PULSE_SURVEY_RESPONSE | Pulse-survey response submitted (k-anonymity floor n<5). | Info |
| HCM_PERFORMANCE_CALIBRATION_FINALIZED | A calibration session was finalized by an HR administrator (4-eyes from the proposing manager). | Notice |
HCM career
Career framework, readiness, promotion calibration.
| Code | Description | Severity |
|---|---|---|
| HCM_CAREER_PATH_VIEWED | Employee viewed their career-path readiness. | Info |
| HCM_CAREER_COACH_INVOKED | AI career-coach surface invoked (PII-anonymised before prompt). | Info |
| HCM_CAREER_PROMOTION_PROPOSED | A promotion was proposed during a calibration session. | Notice |
| HCM_CAREER_PROMOTION_APPROVED | A promotion was approved via the per-session promo cap. | Notice |
HCM manager actions
Manager-side approvals and team analytics.
| Code | Description | Severity |
|---|---|---|
| HCM_MANAGER_APPROVAL_INBOX_VIEWED | Manager opened their approval-inbox dashboard. | Info |
| HCM_MANAGER_TEAM_ANALYTICS_VIEWED | Manager opened a team-analytics report. | Info |
| HCM_MANAGER_SUBTREE_TOGGLED | Manager toggled between direct-reports-only and full-subtree scope. | Info |
HCM employee lifecycle
Onboarding, offboarding, position assignment, leave of absence.
| Code | Description | Severity |
|---|---|---|
| HCM_EMPLOYEE_ONBOARDED | A new employee was provisioned in HCM with their initial position, comp, and benefits class. | Notice |
| HCM_EMPLOYEE_POSITION_CHANGED | An employee's position, title, or reporting line was updated. | Notice |
| HCM_EMPLOYEE_LEAVE_OF_ABSENCE_OPENED | A leave of absence was opened (FMLA, military, sabbatical, personal). | Notice |
| HCM_EMPLOYEE_LEAVE_OF_ABSENCE_CLOSED | A leave of absence ended; the employee returned to active status. | Info |
| HCM_EMPLOYEE_OFFBOARDED | An employee was offboarded — equipment, access, payroll closeout, COBRA notice triggered. | Warning |
| HCM_EMPLOYEE_REHIRED | A previously offboarded employee was rehired (history preserved per workspace policy). | Notice |
HCM payroll runs
Pay-run lifecycle: prepare, generate, transmit ACH, void, reopen.
| Code | Description | Severity |
|---|---|---|
| HCM_PAYROLL_RUN_PREPARED | A pay run was prepared from the period's time + earnings data; awaits HR review. | Notice |
| HCM_PAYROLL_RUN_GENERATED | Pay slips were generated for the run; ACH file is queued but not yet transmitted. | Notice |
| HCM_PAYROLL_RUN_TRANSMITTED | Step-up-protected ACH transmission of the NACHA file to the bank. Money moves. | Critical |
| HCM_PAYROLL_RUN_VOIDED | A previously-transmitted pay run was voided in part or whole — always reviewed. | Warning |
| HCM_PAYROLL_RUN_REOPENED | A closed pay run was reopened for correction — emits a pair with a closing event. | Warning |
| HCM_PAYROLL_GARNISHMENT_APPLIED | A garnishment order was applied to a pay slip per CCPA / IRS Pub 1494 priority. | Notice |
HCM multi-state payroll
State-tax setup, reciprocity routing, SUTA overrides.
| Code | Description | Severity |
|---|---|---|
| HCM_MULTISTATE_TAX_TABLE_REFRESHED | Frozen state tax tables (9 supported states) were refreshed against the publisher catalogue. | Notice |
| HCM_MULTISTATE_W4_UPDATED | An employee's state W-4 was updated. | Info |
| HCM_MULTISTATE_RECIPROCITY_APPLIED | The reciprocity matrix routed withholding to the appropriate state. | Info |
| HCM_MULTISTATE_SUTA_OVERRIDE | An HR administrator overrode the SUTA rate for a state. | Notice |
HCM year-end administration
Form sealing, transmission to IRS / SSA / CRA, corrections (W-2c / 1099-COR).
| Code | Description | Severity |
|---|---|---|
| HCM_YEAREND_RUN_INITIATED | A year-end form-generation run was initiated for a tax year + jurisdiction. | Notice |
| HCM_YEAREND_RUN_REASONABLENESS_REVIEW | AI reasonableness narrative + manual review completed against the run. | Notice |
| HCM_YEAREND_RUN_SEALED | A year-end run was sealed (4-eyes SoD — different admin than the sealer transmits). | Warning |
| HCM_YEAREND_RUN_TRANSMITTED | Step-up-protected transmission to SSA (EFW2) / IRS (FIRE) / CRA (Internet File Transfer). | Critical |
| HCM_YEAREND_CORRECTION_ISSUED | A W-2c / 1099-COR / T4-amended correction was issued for an employee. | Warning |
HCM compensation admin
Pay-band setup, comp-review cycles, market-data refresh.
| Code | Description | Severity |
|---|---|---|
| HCM_COMP_BAND_CREATED | A pay band was created with min / midpoint / max + market reference. | Notice |
| HCM_COMP_BAND_UPDATED | A pay band's midpoint or range was changed. | Notice |
| HCM_COMP_MARKET_DATA_REFRESHED | Market-data refresh applied to comp bands. | Info |
| HCM_COMP_REVIEW_CYCLE_INITIATED | A workspace-wide compensation-review cycle was initiated. | Notice |
| HCM_COMP_REVIEW_PROPOSAL_SUBMITTED | A manager submitted comp proposals for their team. | Info |
| HCM_COMP_REVIEW_CALIBRATION_FINALIZED | A comp-review calibration was finalized by HR (4-eyes from proposing manager). | Warning |
| HCM_COMP_CHANGE_APPLIED | An individual comp change was applied to a pay slip cycle. | Notice |
HCM recruiting (ATS)
Requisitions, candidates, interview scorecards, offers, rejection.
| Code | Description | Severity |
|---|---|---|
| HCM_REQUISITION_CREATED | A job requisition was opened. | Info |
| HCM_REQUISITION_APPROVED | A requisition completed its multi-step approval chain. | Notice |
| HCM_REQUISITION_CLOSED | A requisition was closed (filled, cancelled, on-hold). | Info |
| HCM_CANDIDATE_STAGE_CHANGED | A candidate moved between recruiting stages. | Info |
| HCM_INTERVIEW_SCORECARD_SUBMITTED | An interviewer submitted a scorecard with rating + rationale. | Info |
| HCM_CANDIDATE_REJECTED | A candidate was rejected with an EEOC-categorized reason + (optional) AI-assisted note. | Info |
| HCM_OFFER_EXTENDED | An offer was extended to a candidate. | Notice |
| HCM_OFFER_ACCEPTED | Candidate accepted the offer. | Notice |
| HCM_OFFER_DECLINED | Candidate declined the offer. | Info |
HCM workflow engine
Workflow drafts, publish, runs, deprecation.
| Code | Description | Severity |
|---|---|---|
| HCM_WORKFLOW_DRAFT_SAVED | A workflow draft was saved by an author. | Info |
| HCM_WORKFLOW_PUBLISHED | A workflow draft was published (4-eyes SoD: author ≠ publisher). | Notice |
| HCM_WORKFLOW_DEPRECATED | A published workflow was deprecated; new runs use the successor version. | Notice |
| HCM_WORKFLOW_RUN_STARTED | A workflow run started for a triggering event. | Info |
| HCM_WORKFLOW_RUN_COMPLETED | A workflow run completed successfully. | Info |
| HCM_WORKFLOW_RUN_FAILED | A workflow run failed; the failure detail is on the run history. | Warning |
HCM org administration
Reporting relationships, matrix edges, reorg simulation + apply.
| Code | Description | Severity |
|---|---|---|
| HCM_ORG_REPORTING_RELATIONSHIP_UPDATED | A solid-line reporting relationship changed. | Notice |
| HCM_ORG_MATRIX_EDGE_ADDED | A matrix (dotted-line) reporting edge was added. | Info |
| HCM_ORG_MATRIX_EDGE_REMOVED | A matrix reporting edge was removed. | Info |
| HCM_ORG_REORG_SIMULATED | A reorg simulation was run; results include risk delta + comp shift. | Info |
| HCM_ORG_REORG_APPLIED | Step-up-protected reorg apply: bulk reporting changes committed under 4-eyes. | Critical |
| HCM_ORG_STRUCTURAL_RISK_FLAGGED | Structural risk (overwide span, excessive depth, rank padding, orphaned matrix) was flagged. | Notice |
HCM compliance
EEO-1, OFCCP AAP, ADA accommodations, I-9, DEI policy.
| Code | Description | Severity |
|---|---|---|
| HCM_EEO1_REPORT_GENERATED | An EEO-1 report was generated for a reporting year. | Notice |
| HCM_OFCCP_AAP_GENERATED | An OFCCP Affirmative Action Plan was generated for a federal-contractor reporting year. | Notice |
| HCM_ADA_ACCOMMODATION_REQUESTED | An employee requested an ADA workplace accommodation. | Info |
| HCM_ADA_ACCOMMODATION_DECISION | HR made a decision on an ADA accommodation request. | Notice |
| HCM_I9_CREATED | An I-9 record was created for a new hire. | Info |
| HCM_I9_VERIFIED | Section 2 I-9 verification completed by HR. | Notice |
| HCM_I9_REVERIFIED | A re-verification (work-permit renewal, etc.) was recorded. | Notice |
| HCM_DEI_POLICY_UPDATED | Workspace DEI policy (k-anonymity floor, self-ID categories, reporting cadence) was updated. | Notice |
| HCM_DEI_SIMULATION_RUN | DEI what-if simulation was run; outcomes never reveal individuals (k-anon enforced). | Info |
| HCM_DEI_AI_NARRATIVE_GENERATED | AI-assisted DEI narrative was generated for the admin review surface. | Info |
HCM benefits administration
Plan setup, enrollment windows, EDI 834 transmission.
| Code | Description | Severity |
|---|---|---|
| HCM_BENEFITS_PLAN_CREATED | A new benefits plan (medical, dental, vision, FSA, etc.) was created. | Notice |
| HCM_BENEFITS_PLAN_UPDATED | A benefits plan's premiums, coverage rules, or eligibility changed. | Notice |
| HCM_BENEFITS_ENROLLMENT_WINDOW_OPENED | An open-enrollment window was opened. | Notice |
| HCM_BENEFITS_ENROLLMENT_WINDOW_CLOSED | An open-enrollment window closed; mid-year change now requires a life event. | Notice |
| HCM_BENEFITS_EDI_834_GENERATED | An ASC X12 834 (v005010X220A1) EDI file was generated for carrier transmission. | Notice |
| HCM_BENEFITS_EDI_834_TRANSMITTED | Step-up-protected transmission of the 834 file to the carrier. | Critical |
| HCM_BENEFITS_COBRA_NOTICE_SENT | COBRA election notice was sent to a qualifying event. | Notice |
HCM learning administration
Course publication, peer-author approval, badge catalog.
| Code | Description | Severity |
|---|---|---|
| HCM_LEARNING_COURSE_PUBLISHED | A course was published to the catalog. | Notice |
| HCM_LEARNING_COURSE_RETIRED | A course was retired from the catalog. | Info |
| HCM_LEARNING_PEER_AUTHORED_SUBMITTED | A peer-authored course was submitted for review (4-eyes SoD). | Info |
| HCM_LEARNING_PEER_AUTHORED_APPROVED | A peer-authored course was approved (different reviewer than author). | Notice |
| HCM_LEARNING_BADGE_CATALOG_UPDATED | Badge catalog was updated by an admin. | Info |
HCM document signing
Template activation, signing chain, decline / reassign.
| Code | Description | Severity |
|---|---|---|
| HCM_DOC_TEMPLATE_DRAFTED | A signing template was drafted by an admin. | Info |
| HCM_DOC_TEMPLATE_ACTIVATED | A template was activated (4-eyes SoD: drafter ≠ activator). Legally binding for new signers. | Notice |
| HCM_DOC_SIGNING_ROUND_DELIVERED | A document was delivered to the next signer in the chain. | Info |
| HCM_DOC_SIGNING_OPENED | A signer opened the document (IP + UA recorded). | Info |
| HCM_DOC_SIGNING_SIGNED | A signer completed signing. | Notice |
| HCM_DOC_SIGNING_DECLINED | A signer declined to sign; chain terminates per template policy. | Warning |
| HCM_DOC_SIGNING_REASSIGNED | A signing role was reassigned to a different signer. | Notice |
HCM time-off administration
Policy configuration, accrual methods, year-end carry-over.
| Code | Description | Severity |
|---|---|---|
| HCM_TIMEOFF_POLICY_CREATED | A time-off policy was created with an accrual method + caps + waiting period. | Notice |
| HCM_TIMEOFF_POLICY_UPDATED | A time-off policy was updated. | Notice |
| HCM_TIMEOFF_YEAREND_CARRYOVER_RUN | Year-end carry-over processing ran for the workspace. | Info |
Print this page for audit evidence.
Use your browser's print dialog (Cmd / Ctrl + P) — the site strips chrome on print so you get a clean, paginated table ready to attach to an audit work-paper. Every row prints with its anchor URL so the auditor can link back to the live source.