Analytics Catalog/Workday/Change ledger
Explore the catalogModulesHeadcount historyPayroll extractionIntegration securityPrism pricing
Workday · Audit and compliance · Editorial

The change history the system does not keep

Deleted payroll inputs vanish from the data source that held them. Rescinds rewrite the timeline in place. There is no change feed to subscribe to. The system keeps now; if you want then, you have to keep it yourself.

RuleSnapshot daily and diff consecutive days. A change you can replay is the only change history that survives.
Neverpromise an auditor a deletion trail from delivered reporting. Some data sources drop deleted records entirely.
What disappears, and howdeletions leave no trace, and corrections rewrite the past.

Delete a payroll input and it is not marked deleted; it is gone. Users report that removed inputs disappear entirely from the Payroll Inputs data source, leaving no sign they existed. That is the sharpest case of a general property: Workday has no subscribable change feed for most objects, so nothing downstream is told when a record changes or dies.

The integration vendors confirm it in writing: a major connector’s public documentation states that deleted rows are never captured during incremental ingestion. Rescinds and corrections go further, rewriting effective-dated history in place, so the timeline you read today is not the timeline that produced last quarter’s numbers.

The recurring forum questions follow directly: who deleted this, what changed in this business process definition, which delegations were active last year. The delivered answer to each is silence.

The owned answersnapshot daily, diff consecutive days, keep every diff.

The fix does not need the source to cooperate. Snapshot each object daily into your warehouse, then diff consecutive days: a row present yesterday and missing today is a delete, new today is an insert, present in both with different values is an update. The diffs accumulate into a change ledger, one row per detected change, retained forever. The headcount history snapshot is the same foundation; the ledger falls out of it.

-- deletions between two consecutive snapshots
SELECT y.worker_id, y.input_code
FROM snap_payroll_input y
LEFT JOIN snap_payroll_input t
  ON  t.worker_id = y.worker_id
  AND t.input_code = y.input_code
  AND t.snapshot_date = DATE '2026-08-06'
WHERE y.snapshot_date = DATE '2026-08-05'
  AND t.worker_id IS NULL

The pipeline that feeds it is the ordinary one: extraction under a locked-down integration account, snapshots landed on schedule, and the payroll extraction for the inputs Workday itself forgets first.

What compliance getsa replayable trail, which is what auditors ask for.

Auditors ask for exactly what the ledger stores: what changed, when, and the values before and after. A SOX control that depends on knowing about deletions cannot rest on a data source that forgets them. Three days of one diffed object look like this.

Day, illustrativeInsertsUpdatesDeletesChanges detected
Monday421187167
Tuesday359612143
Wednesday511309190
Three-day total12834428500

Sample values are illustrative, never client data. Each day’s changes are the sum of its inserts, updates, and deletes, and the three-day totals crossfoot exactly.

Use case
Problem
Deleted records vanish from some delivered data sources, rescinds rewrite history in place, and there is no change feed to subscribe to.
What we build
Daily snapshots in your warehouse, diffed day over day into a permanent ledger of every insert, update, and delete.
What you get
A replayable answer to what changed and when, with before and after values, retained forever for any object you snapshot.
Could you show an auditor who deleted that row?
We build the snapshot diff ledger that answers in one query.
Talk to us
Terms on this page
SOX
Sarbanes-Oxley, the United States law behind financial reporting controls and audits.
SQL
Structured Query Language, the standard way to query a warehouse.
snapshot
A dated copy of a table state, kept so the past stays queryable.
diff
The comparison of two snapshots that classifies every row as inserted, updated, deleted, or unchanged.
change ledger
The permanent table of diffs: one row per detected change, kept forever.
rescind
Workday’s undo for a completed transaction. It rewrites history rather than appending to it.
effective dating
Workday’s timeline of a record’s values by date. Corrections change it in place.
data source
A delivered, queryable view over Workday objects, the base of Workday reports.