Change tracking

Not covered: It stops at personal data: both packages skip elements annotated with @PersonalData, which are subject to audit loggingAudit loggingcapabilityRecording who touched personal or sensitive data, in a form an auditor accepts, without hand-writing it in every handler. It is often confused with application logging, which records what the code did rather than who accessed what.SAP only, and the Node.js README gives the reason, that a readable log would let users get around the audit log. On Java, changes made through native SQL, JDBC or a remote service are not tracked, and the retention of the log and the access rules on it are the application's to settle.