Data model

Explore the employee records, effective history and decisions behind Core HR.

41 tables · 214 relationships

How the model is organised

People and organization

Employees, Positions, JobTitles, Departments, Locations, Divisions, EmploymentTypes, CostCenters and Entities describe the person, employer and organization. EmergencyContacts and Dependents retain separately protected personal information. A position may have approved whole-seat capacity; its single Incumbent field is only a summary when exactly one person occupies it.

Employees
Positions
JobTitles
Departments
Locations
Divisions
EmploymentTypes
CostCenters
Entities describe the person
employer
organization

Identity and authorization

Users maps the authenticated account to the actual person. AccessGrants defines current role, employer, subject, task and sensitive-information scope. Neither employment status nor a surviving external account is sufficient authorization by itself.

Users maps the authenticated account to the actual person

Employment changes

HRChanges and ApprovalDecisions hold the proposed values, effective boundary and independent decision. EmploymentSpells, PositionAssignments and VacancyEpisodes retain dated service, seat occupancy and vacancy history. EmploymentHistory and PositionHistory record accepted effects and linked corrections.

HRChanges
ApprovalDecisions hold the proposed values
effective boundary
independent decision

Leave

LeaveTypes, LeavePolicies, WorkCalendars and WorkSchedules define eligible day-based calculation. LeaveRequests and LeaveDays preserve the approved request and daily fractions. LeaveBalances summarizes the year, while LeaveEntries records earned, reserved, taken, released and corrected contributions once.

LeaveTypes
LeavePolicies
WorkCalendars
WorkSchedules define eligible day-based calculation

Policies and documents

CompanyPolicies and PolicyAssignments bind the employee's acknowledgment to an exact published version. EmployeeDocuments, DocumentRequirements and DocumentAssignments connect protected evidence to the requirement it satisfies. RetentionActions separates reviewed retention or deletion work from ordinary employment changes.

CompanyPolicies
PolicyAssignments bind the employee's acknowledgment to an exact published version

Joining and leaving

ChecklistTemplates, OnboardingChecklists and ChecklistTasks define versioned assignments, required evidence and actual completion. A task request or message acknowledgment is distinct from the provider outcome needed to close it.

ChecklistTemplates
OnboardingChecklists
ChecklistTasks define versioned assignments
required evidence
actual completion

Reporting and handoffs

OrgChartSnapshots and OrgSummaries preserve scoped reporting populations and safe directory projections. IntegrationEvents tracks exact external requests and outcomes. MigrationBatches identifies reconciled historical imports and the boundary before new effects begin.

OrgChartSnapshots
OrgSummaries preserve scoped reporting populations
safe directory projections

Keys and references

A future approved hire or transfer reserves the appropriate dated capacity without changing today’s headcount. Applied assignments are checked for overlap and hierarchy consistency. Rehire creates another employment spell for the validated person; it does not overwrite the earlier separation.

Leave submission reserves the frozen daily portions. Approval leaves those reservations in place. Actual use moves the same amount from pending to taken, and cancellation releases only the unused part. Imported balance history is reconciled once so it cannot create another accrual, reservation or account request.

Sensitive payloads follow purpose, classification and retention rules throughout their lifecycle. Keeping an audit record does not require retaining every sensitive attachment forever. File retrieval and historical reports recheck current permission.

Migration order

Resolve people and employers
Ends with: Map source person, employee and employer identities, then load compatible organization masters. Preserve earlier identifiers and never merge people by email alone.
Reconcile effective history
Ends with: Import employment spells, dated position assignments and hierarchy links in controlled passes. Verify capacity, past separations and future reservations before publishing current summaries.
Bring across leave and obligations
Ends with: Initialize the reconciled cutoff balance once, with reserved daily details and nonposting history. Import the exact document, policy and checklist versions with their actual evidence.
Verify external identities and activate
Ends with: Retain unresolved provider action keys and reconcile source watermarks. Independent HR and required technical review precede new account actions, accruals or messages.

Tables

Find a table 41 tables

EmployeesThe central person record and the single source of truth for whomaster

Field	Type	Required	Details
`EmployeeID`	text	yes
`FirstName`	text	yes
`LastName`	text	yes
`PreferredName`	text		Display name if different from legal
`WorkEmail`	text	yes
`PersonalEmail`	text		For offboarding communications
`WorkPhone`	text
`NationalID`	text		Masked by default; full structured identifier requires explicit HR Manager subject/purpose grant or configured subject self-visibility, never general Admin/Manager/Specialist access
`DateOfBirth`	date		Full structured value only for HR Manager with current subject/purpose grant, or explicit subject self-visibility; HR Specialist document verification does not grant this employee-column access
`Gender`	select		Woman, Man, Nonbinary, SelfDescribed, PreferNotToSay. Optional self-declared sensitive data, no eligibility inference
`HireDate`	date	yes	Current or planned spell start date; accepted history and ActualStartAt control effective employment, not this mutable-looking projection
`OriginalHireDate`	date		Earliest effective start across nonvoid employment spells; historical identity survives rehire
`TerminationDate`	date		Most recent effective spell end date, first nonemployed date (exclusive end); retained across rehire history
`Position`	reference	yes	→ Positions. Primary current/planned assignment summary; historical seat stays in PositionAssignments
`Department`	reference	yes	→ Departments
`Location`	reference	yes	→ Locations
`EmploymentType`	reference	yes	→ EmploymentTypes
`Manager`	reference		→ Employees (self)
`Status`	select	yes	Pending, Active, OnLeave, Terminated, Rehireable
`Country`	select	yes	US, GB, CA, AU, DE, FR, IN, Other. Selector agrees with CountryCode; Other requires an enabled ISO country in Entities.AllowedCountries
`Entity`	select	yes	Primary, Other. Legacy selector agrees with Entities.LegacySelector; EntityRecord is the authoritative employer identity
`HomeAddress`	text		Employee-editable
`Active`	toggle	yes	True only for applied employed status Active or OnLeave; Pending/Terminated/Rehireable false; not the login authorization flag
`PersonKey`	text	yes	Stable person identity; EmployeeID retained across rehire; never merge by email alone
`FullName`	formula	yes	fx: preferred display name when set, otherwise FirstName plus LastName
`EntityRecord`	reference	yes	→ Entities
`CountryCode`	text	yes	Reviewed ISO country matching legacy selector
`CurrentSpell`	reference		→ EmploymentSpells
`RehireEligible`	toggle		Separate reviewed eligibility; not employment or login status
`YearsOfService`	formula		fx: completed years in the current applied employment spell at report cutoff; breaks excluded
`NextAnniversary`	date		Next current-spell anniversary on/after local today, including year boundary; Feb29 follows configured policy
`RecordVersion`	number	yes	Current-state revision; protected changes compare expected version
`CurrentAsOf`	datetime	yes	Projection cutoff
`SelfUser`	reference		→ Users. Authenticated primary self-service identity, never inferred from email
`ManagerPath`	longtext		Cycle-safe current ancestor EmployeeIDs for scoped access; recomputed at effective boundaries
`MigrationBatch`	reference		→ MigrationBatches

PositionsSeat-level org entries. A Position is what an Employee fills —master

Field	Type	Required	Details
`PositionCode`	text	yes
`JobTitle`	reference	yes	→ JobTitles
`Department`	reference	yes	→ Departments
`Location`	reference	yes	→ Locations
`CostCenter`	reference		→ CostCenters
`EmploymentType`	reference	yes	→ EmploymentTypes
`Headcount`	number	yes	Positive integer capacity in full seats; multi-incumbent PositionAssignments cannot exceed dated approved capacity; no FTE-costing claim
`ReportsTo`	reference		→ Positions (self)
`Status`	select	yes	Planned, Open, Filled, Frozen, Retired
`OpenedAt`	date		Current vacancy-episode opening date summary; historical episodes remain in VacancyEpisodes
`FilledAt`	date		Current/latest vacancy-episode fill date summary, not employee original HireDate
`Incumbent`	reference		→ Employees. Summary only when exactly one current occupant; null for zero or multiple, never complete occupancy evidence
`Active`	toggle	yes	False only when Retired; Frozen blocks new assignments but retains current occupants
`EntityRecord`	reference	yes	→ Entities
`OccupiedSeats`	number	yes	Current effective assignment count
`ReservedSeats`	number	yes	Informational count of approved future assignment rows; never subtract all future rows from present capacity without date-overlap checks
`AvailableSeats`	formula	yes	fx: current effective capacity minus active occupancy at AsOf; future request admission separately checks every overlapping approved interval
`RecordVersion`	number	yes	Atomic interval-capacity version
`CapacityHistory`	longtext	yes	Approved HRChanges IDs, effective integer capacities and intervals; current Headcount is summary
`CurrentVacancy`	reference		→ VacancyEpisodes
`Change`	reference		→ HRChanges
`AsOf`	datetime	yes	Current summary cutoff; future date admission is a separate interval-capacity check

JobTitlesCanonical job titles (Software Engineer II, Regional Sales Manager).master

Field	Type	Required	Details
`TitleCode`	text	yes
`Name`	text	yes
`JobFamily`	select		Engineering, Sales, Product, Ops, G&A, Support
`Level`	select		IC1, IC2, IC3, IC4, IC5, IC6, IC7, M1, M2, M3, M4, M5, M6
`ExemptStatus`	select		Exempt, NonExempt (US)
`Active`	toggle	yes
`Change`	reference		→ HRChanges

DepartmentsOrganizational departments (Engineering, Sales, People, Finance).master

Field	Type	Required	Details
`DepartmentCode`	text	yes
`Name`	text	yes
`Division`	reference		→ Divisions
`Parent`	reference		→ Departments (self)
`CostCenter`	reference		→ CostCenters. Default center only; if CostCenters.Department is set it must point back to this department
`Head`	reference		→ Employees
`Active`	toggle	yes
`EntityRecord`	reference	yes	→ Entities
`Change`	reference		→ HRChanges

LocationsPhysical and remote locations where employees work.master

Field	Type	Required	Details
`LocationCode`	text	yes
`Name`	text	yes
`Type`	select	yes	Office, Remote, Field, Hybrid
`Address`	text
`City`	text
`Region`	text		State / province
`Country`	select	yes	US, GB, CA, AU, DE, FR, IN, Other. Selector agrees with CountryCode; Other requires an enabled ISO country in Entities.AllowedCountries
`Timezone`	text
`Active`	toggle	yes
`EntityRecord`	reference	yes	→ Entities
`Change`	reference		→ HRChanges
`CountryCode`	text	yes	Enabled ISO country agreeing with Country
`Calendar`	reference		→ WorkCalendars

DivisionsTop-level business units that roll up departments (Commercial,master

Field	Type	Required	Details
`DivisionCode`	text	yes
`Name`	text	yes
`Head`	reference		→ Employees
`Active`	toggle	yes
`EntityRecord`	reference	yes	→ Entities
`Change`	reference		→ HRChanges

EmploymentTypesWorker classifications with their policy and statutory defaults.master

Field	Type	Required	Details
`TypeCode`	text	yes
`Name`	text	yes	FullTime, PartTime, Contractor, Intern, Temp
`EligibleForLeave`	toggle	yes
`EligibleForBenefits`	toggle	yes	Information for the external benefits owner; not enrollment, legal eligibility or coverage proof
`DefaultWeeklyHours`	number
`Active`	toggle	yes
`Change`	reference		→ HRChanges

CostCentersOrganizational cost-center reference codes shared with external Payroll/Finance; this app does not calculate employee cost or originate GL journals.master

Field	Type	Required	Details
`CostCenterCode`	text	yes
`Name`	text	yes
`Department`	reference		→ Departments. Optional owning department; multiple centers allowed, department default must be compatible
`GLAccount`	text
`Active`	toggle	yes
`EntityRecord`	reference	yes	→ Entities
`Change`	reference		→ HRChanges

LeaveTypesLeave categories with country- and class-scoped accrual rules.master

Field	Type	Required	Details
`LeaveCode`	text	yes
`Name`	text	yes
`Category`	select	yes	Paid, Unpaid, Statutory
`Country`	select		US, GB, CA, AU, DE, FR, IN, Other. Selector agrees with CountryCode; Other requires an enabled ISO country in Entities.AllowedCountries; blank LeaveTypes.Country means global candidate, subject to exact LeavePolicies precedence
`EmploymentType`	reference		→ EmploymentTypes
`AccrualMethod`	select	yes	Annual, Monthly, PerPayPeriod, Lump
`AccrualRate`	number	yes	Days per selected approved accrual period; LeavePolicies supplies version, proration, caps and event schedule
`CarryoverCap`	number
`MaxDaysPerYear`	number		Optional annual positive earning cap in days, not automatically a request-use cap; explicit LeavePolicies controls limits
`RequiresDocumentation`	toggle	yes
`Active`	toggle	yes
`CountryCode`	text		Enabled ISO country, null for global candidate
`Change`	reference		→ HRChanges

CompanyPoliciesVersioned policy documents employees must acknowledge — handbook,master

Field	Type	Required	Details
`PolicyCode`	text	yes
`Name`	text	yes
`Category`	select	yes	Handbook, Conduct, Safety, IT, Privacy, Compliance
`Version`	text	yes	e.g. "2026.1"
`EffectiveFrom`	date	yes
`DocumentURL`	text	yes	Private immutable policy-file locator resolved after authorization; exact content hash required
`RequiresAcknowledgment`	toggle	yes
`AppliesTo`	select		AllEmployees, ByDepartment, ByCountry, ByEmploymentType
`ReminderDays`	number		Positive interval between reminder attempts after assignment, overridden only by approved ReminderSchedule; not hard-coded universal days
`Active`	toggle	yes
`PolicyVersionKey`	text	yes	Unique PolicyCode plus Version; published row/content immutable
`ContentHash`	text	yes	Digest of exact published policy content
`AudienceRules`	longtext	yes	Validated entity/department/country/employment-type criteria with effective bounds; no empty By... rule
`AudienceSnapshot`	longtext		Frozen eligible Employee/Spell IDs and rule/version at publication
`ReminderSchedule`	longtext	yes	Approved offsets/escalation/maximum attempts/timezone and stop conditions
`PublishedBy`	reference		→ Users. Authorized HR Manager executor
`PublishedAt`	datetime		Actual publication time
`Change`	reference	yes	→ HRChanges
`Status`	select	yes	Draft, Submitted, Published, Superseded, Withdrawn
`Supersedes`	reference		→ CompanyPolicies
`EffectiveTo`	date		Exclusive applicability end

EmploymentHistoryEvery lifecycle event: hire, promotion, transfer, manager change,transaction

Field	Type	Required	Details
`Employee`	reference	yes	→ Employees
`EventType`	select	yes	Hire, Promotion, Transfer, ManagerChange, LOAStart, LOAReturn, Termination, Rehire
`EffectiveDate`	date	yes
`FromPosition`	reference		→ Positions
`ToPosition`	reference		→ Positions
`FromDepartment`	reference		→ Departments
`ToDepartment`	reference		→ Departments
`FromLocation`	reference		→ Locations
`ToLocation`	reference		→ Locations
`FromManager`	reference		→ Employees
`ToManager`	reference		→ Employees
`Reason`	select		Promotion, Realignment, Relocation, Voluntary, Involuntary, Retirement, Redundancy, EndOfContract
`Notes`	text
`RecordedBy`	reference		→ Employees. Historical employee linkage if actor has an employee record; ActorUser is authoritative
`RecordedAt`	date	yes
`EventNumber`	text	yes	Unique immutable EmploymentEvent identity
`Change`	reference	yes	→ HRChanges
`ActorUser`	reference	yes	→ Users. Actual responsible authorized person, not inferred from employee status
`OccurredAt`	datetime	yes	Evidenced occurrence/effective boundary with timezone
`RecordedTimestamp`	datetime	yes	Actual record time distinct from effective time
`Status`	select	yes	Scheduled, Applied, Cancelled, Corrected
`Corrects`	reference		→ EmploymentHistory. Append-only reviewed correction; old facts remain in history
`SourceMode`	select	yes	Native, MigrationHistory
`MigrationBatch`	reference		→ MigrationBatches
`Spell`	reference	yes	→ EmploymentSpells
`FromEntity`	reference		→ Entities
`ToEntity`	reference		→ Entities
`FromEmploymentType`	reference		→ EmploymentTypes
`ToEmploymentType`	reference		→ EmploymentTypes
`BeforeState`	longtext	yes	Exact historical org/type/status fields and source versions, protected by classification
`AfterState`	longtext	yes	Approved effective resulting state, not a future overwrite of current employee
`SeparationClass`	select		Voluntary, Involuntary, Retirement, EndOfContract, Other
`Regrettable`	toggle		Optional reviewed HR-only classification; no inference from leave or diagnosis

PositionHistoryThe seat-side mirror of EmploymentHistory: when a Positiontransaction

Field	Type	Required	Details
`Position`	reference	yes	→ Positions
`EventType`	select	yes	Opened, Filled, Vacated, Reassigned, Frozen, Retired
`EffectiveDate`	date	yes
`IncumbentBefore`	reference		→ Employees
`IncumbentAfter`	reference		→ Employees
`Reason`	text
`RecordedBy`	reference		→ Employees. Historical employee linkage if actor has an employee record; ActorUser is authoritative
`EventNumber`	text	yes	Unique immutable PositionEvent identity
`Change`	reference	yes	→ HRChanges
`ActorUser`	reference	yes	→ Users. Actual responsible authorized person, not inferred from employee status
`OccurredAt`	datetime	yes	Evidenced occurrence/effective boundary with timezone
`RecordedTimestamp`	datetime	yes	Actual record time distinct from effective time
`Status`	select	yes	Scheduled, Applied, Cancelled, Corrected
`Corrects`	reference		→ PositionHistory. Append-only reviewed correction; old facts remain in history
`SourceMode`	select	yes	Native, MigrationHistory
`MigrationBatch`	reference		→ MigrationBatches
`Assignment`	reference		→ PositionAssignments
`Vacancy`	reference		→ VacancyEpisodes

OrgChartSnapshotsPoint-in-time captures of the org structure for audit and "whattransaction

Field	Type	Required	Details
`SnapshotNumber`	text	yes
`AsOfDate`	date	yes
`Reason`	select	yes	Scheduled, Reorg, BoardReview, YearEnd, Adhoc
`TotalHeadcount`	number	yes	Frozen distinct employed people Active/OnLeave at cutoff, excluding future Pending and ended spells
`TotalPositions`	number	yes
`VacantPositions`	number	yes
`DataURL`	text		Authorized private object locator for immutable captured population; no public or editable JSON address
`TakenBy`	reference		→ Employees. Optional historical employee link of CapturedBy
`TakenAt`	date	yes
`AsOf`	datetime	yes	Exact effective cutoff and entity timezone
`CapturedBy`	reference	yes	→ Users
`CapturedAt`	datetime	yes	Actual capture timestamp
`PopulationHash`	text	yes	Complete frozen employee/spell/assignment/master-version membership digest
`PopulationManifest`	longtext	yes	IDs and effective org dimensions; peer-safe names/title tree separated from HR-only dimensions
`Status`	select	yes	Draft, Frozen, Superseded
`AccessClass`	select	yes	HRRestricted, OrgDirectory
`Supersedes`	reference		→ OrgChartSnapshots. Reviewed late-data replacement; original snapshot remains immutable

LeaveRequestsEmployee-submitted leave requests requiring manager approval.transaction

Field	Type	Required	Details
`RequestNumber`	text	yes
`Employee`	reference	yes	→ Employees
`LeaveType`	reference	yes	→ LeaveTypes
`StartDate`	date	yes
`EndDate`	date	yes
`Days`	formula	yes	fx: sum frozen LeaveDays.Fraction across inclusive StartDate through EndDate; nonwork dates contribute0
`Status`	select	yes	Draft, Submitted, Approved, Rejected, Cancelled, Taken
`Reason`	text
`Documentation`	text		Private EmployeeDocuments locator accessible only with sensitive-class grant; managers get operational readiness only
`Approver`	reference		→ Employees. Display employee link for AssignedApproverUser when one exists
`ApprovedAt`	date
`RejectionReason`	text
`Spell`	reference	yes	→ EmploymentSpells
`SubmittedBy`	reference		→ Users
`SubmittedAt`	datetime		Actual submission time
`AssignedApproverUser`	reference		→ Users. Eligible current Manager or HR Manager, independent of employee/request preparer
`Decision`	reference		→ ApprovalDecisions
`ApprovalTimestamp`	datetime		Actual approval time, legacy ApprovedAt local-date projection
`ContentVersion`	number	yes	Material dates/type/fractions/document requirement revision
`BreakdownHash`	text		Frozen daily schedule/policy/year/balance allocation hash
`CancelledDays`	number	yes	Cumulative effective released unused day fractions; never cancelled taken days without approved correction
`TakenDays`	formula	yes	fx: cumulative effective daily LeaveEntries taken contributions
`CompletedAt`	datetime		All requested fractions taken or validly cancelled/rejected
`RequestPolicy`	reference		→ LeavePolicies. Header policy; daily rows remain authoritative for cross-boundary requests
`MigrationBatch`	reference		→ MigrationBatches
`OperationalLabel`	text	yes	Neutral team-facing absence label; never medical/protected leave reason
`CancellationDecision`	reference		→ ApprovalDecisions. Assigned independent Manager/HR Manager for unused cancellation; HR Manager required for taken corrections

LeaveBalancesDerived day balance for one employee, leave-type pool and leave year; effective ledger entries and active daily reservations are the authority.transaction

Field	Type	Required	Details
`Employee`	reference	yes	→ Employees
`LeaveType`	reference	yes	→ LeaveTypes
`Accrued`	number	yes	Effective opening accrued plus signed earning/adjustment/reversal entries for this leave year
`Taken`	number	yes	YTD taken
`Pending`	number	yes	All effective reserved submitted and approved-but-not-yet-taken fractions; approval alone never releases it
`Carryover`	number		Effective carry-in less expiry/transfer-out corrections; cap/expiry policy and reserved portions reconciled
`Available`	formula	yes	fx: Accrued + Carryover − Taken − Pending
`AsOfDate`	date	yes
`BalanceNumber`	text	yes	Unique Employee plus LeaveType pool plus LeaveYear
`LeaveYear`	text	yes	Stable year/calendar identity, not assumed calendar year
`YearStart`	date	yes	Inclusive policy-year start
`YearEnd`	date	yes	Exclusive policy-year end
`Policy`	reference	yes	→ LeavePolicies
`Version`	number	yes	Atomic ledger/reservation version
`UpdatedAt`	datetime	yes	Exact latest projection timestamp
`Status`	select	yes	Open, Closing, Closed
`MigrationBatch`	reference		→ MigrationBatches
`TransferredOut`	number	yes	Read-only sum unique approved CarryOut.TransferDays; Closed historical Available is not spendable

EmployeeDocumentsTax forms (W-4, I-9, Form 16), contracts, NDAs, visa andtransaction

Field	Type	Required	Details
`DocumentNumber`	text	yes
`Employee`	reference	yes	→ Employees
`Type`	select	yes	TaxForm, RightToWork, Visa, WorkPermit, Contract, NDA, PolicyAck, Certification, Medical, Other
`Name`	text	yes
`RelatedPolicy`	reference		→ CompanyPolicies (set on PolicyAck)
`IssueDate`	date
`ExpirationDate`	date
`FileURL`	text	yes	Private versioned object locator; each retrieval rechecks subject/class/purpose/current access; never a durable public sharing URL
`Status`	select	yes	Pending, OnFile, ExpiringSoon, Expired, Revoked
`UploadedBy`	reference		→ Employees. Optional employee linkage; UploadedByUser is actual authenticated actor
`UploadedAt`	date	yes
`AcknowledgedAt`	date		For PolicyAck rows
`UploadedByUser`	reference	yes	→ Users
`UploadedTimestamp`	datetime	yes	Actual ingest time
`ContentHash`	text	yes	Immutable uploaded object version digest
`Classification`	select	yes	GeneralHR, Identity, Tax, Medical, PersonalContact, PolicyReceipt, Qualification
`VerifiedBy`	reference		→ Users. Granted HR Specialist or HR Manager; independent reviewer when requirement policy demands
`VerifiedAt`	datetime		Actual evidence verification time
`Supersedes`	reference		→ EmployeeDocuments
`PolicyAssignment`	reference		→ PolicyAssignments
`AcknowledgedByUser`	reference		→ Users. Actual subject acknowledgment, never HR proxy by default
`AcknowledgedTimestamp`	datetime		Actual subject acknowledgment of assigned hash/version
`Requirement`	reference		→ DocumentRequirements
`RetentionRule`	longtext	yes	Approved class/entity rule and trigger date; no universal legal period
`LegalHold`	toggle	yes	Active hold blocks deletion, never implies indefinite public access
`DeletedAt`	datetime		Actual approved file deletion outcome; non-sensitive tombstone retained
`RetentionAction`	reference		→ RetentionActions
`MigrationBatch`	reference		→ MigrationBatches
`EmployeeVisible`	toggle	yes	Class/requirement policy permits subject retrieval; self identity alone does not reveal restricted internal HR material

EmergencyContactsNext-of-kin contacts per employee, employee-editable.transaction

Field	Type	Required	Details
`Employee`	reference	yes	→ Employees
`FullName`	text	yes
`Relationship`	select	yes	Spouse, Parent, Sibling, Child, Friend, Other
`Phone`	text	yes	Masked to all except HR and the Employee
`AlternatePhone`	text		Protected exactly like primary Phone; restricted employee/authorized HR purpose
`Email`	text		Protected personal contact channel, not a manager directory field
`IsPrimary`	toggle	yes
`Notes`	text		Protected contact notes; no unrestricted manager/export access
`RecordNumber`	text	yes	Stable subject-owned record identity
`UpdatedBy`	reference	yes	→ Users
`UpdatedAt`	datetime	yes	Actual change timestamp
`RecordVersion`	number	yes	Optimistic concurrency and protected edit history
`Archived`	toggle	yes	Soft inactive state; deletion follows RetentionActions
`RetentionAction`	reference		→ RetentionActions

DependentsSpouse, partner, and children. Captured here so Payroll and atransaction

Field	Type	Required	Details
`Employee`	reference	yes	→ Employees
`FullName`	text	yes
`Relationship`	select	yes	Spouse, DomesticPartner, Child, Other
`DateOfBirth`	date		Masked
`Gender`	select		Woman, Man, Nonbinary, SelfDescribed, PreferNotToSay. Optional protected information
`IsCovered`	toggle	yes	Reported external benefits status only; reviewed external owner remains authoritative, never an enrollment decision
`StudentStatus`	toggle		For over-age child coverage
`RecordNumber`	text	yes	Stable subject-owned record identity
`UpdatedBy`	reference	yes	→ Users
`UpdatedAt`	datetime	yes	Actual change timestamp
`RecordVersion`	number	yes	Optimistic concurrency and protected edit history
`Archived`	toggle	yes	Soft inactive state; deletion follows RetentionActions
`RetentionAction`	reference		→ RetentionActions

OnboardingChecklistsPer-hire (or per-separation) container of lightweight tasks.transaction

Field	Type	Required	Details
`ChecklistNumber`	text	yes
`Employee`	reference	yes	→ Employees
`Type`	select	yes	Onboarding, Offboarding, Transfer, Rehire
`Template`	text		Template used to seed tasks
`StartDate`	date	yes
`TargetCompletion`	date
`Status`	select	yes	Pending, InProgress, Completed, Overdue, Cancelled
`Tasks`	text		Read-only backward-compatible JSON projection of versioned ChecklistTasks; not independently editable completion evidence
`PercentComplete`	formula	yes	fx: completed or approved-waived applicable tasks / all applicable noncancelled tasks times100; null when denominator0 pending HR no-task clearance
`OwnedBy`	reference		→ Employees. Optional employee linkage for OwnerUser
`OwnerUser`	reference	yes	→ Users. Accountable HR Specialist/HR Manager coordinator
`Spell`	reference	yes	→ EmploymentSpells
`Change`	reference	yes	→ HRChanges. Unique lifecycle change plus template-version seed identity
`TemplateVersion`	reference	yes	→ ChecklistTemplates
`StartedAt`	datetime		Actual orchestration start
`CompletedAt`	datetime		All required tasks resolved and closure reviewed
`ReadinessDecision`	reference		→ ApprovalDecisions. Independent HR Manager readiness/closure/no-task review
`MigrationBatch`	reference		→ MigrationBatches

UsersAuthenticated human/service identity; an employee record or matching email alone grants no access.master

Field	Type	Required	Details
`UserID`	text	yes	Stable provider-backed account identity
`PersonKey`	text		Verified actual person identity for independence; absent only for scoped service identity
`Employee`	reference		→ Employees. Verified current/self mapping; external task participant may have no employment record
`IdentityKind`	select	yes	Human, Service
`Role`	select	yes	Admin, HR Manager, Manager, HR Specialist, Employee
`Roles`	longtext	yes	Explicit approved subset of these same five roles; role does not bypass field/subject grants
`ProviderSubject`	text	yes	Provider namespace plus immutable subject identifier
`Active`	toggle	yes	Technical account state; domain grants still require current eligible scope
`LastVerifiedAt`	datetime	yes	Current authenticated mapping evidence

EntitiesGoverned legal-employer and policy-country scope; no payroll calculation.master

Field	Type	Required	Details
`EntityCode`	text	yes	Stable legal-employer code
`Name`	text	yes	Legal employer display
`AllowedCountries`	longtext	yes	Explicit enabled ISO country codes and legacy-selector mapping
`Timezone`	text	yes	IANA timezone used for effective local employment boundaries
`AnniversaryPolicy`	select	yes	Feb28ForLeapDay, Mar1ForLeapDay
`Active`	toggle	yes	Deactivation requires reviewed active-spell/assignment handling
`Change`	reference		→ HRChanges
`LegacySelector`	select	yes	Primary, Other. At most one enabled Primary employer; Other is disambiguated by EntityRecord
`ReportingPolicy`	longtext	yes	Approved purpose, small-group suppression threshold, safe aggregate dimensions and span-of-control target bands

AccessGrantsEffective role, delegated preparation or restricted subject/class access, separately authorized and revocable.transaction

Field	Type	Required	Details
`GrantNumber`	text	yes	Unique grant identity
`User`	reference	yes	→ Users
`Kind`	select	yes	RoleScope, DelegatedPreparation, SensitiveAccess, TaskAccess, TechnicalSupport
`Entity`	reference		→ Entities
`Department`	reference		→ Departments
`SubjectEmployee`	reference		→ Employees. Required for bounded self/task/technical subject scope when applicable
`AllowedActions`	longtext	yes	Exact actions/fields/document classes/purpose; no wildcard implied by role
`EffectiveFrom`	datetime	yes	Inclusive
`EffectiveTo`	datetime	yes	Exclusive finite expiry
`PreparedBy`	reference	yes	→ Users
`ApprovedBy`	reference		→ Users. Required before Active; independent HR Manager for domain/PII, independent Admin for technical role config plus required domain decision
`Decision`	reference		→ ApprovalDecisions. Mandatory before activation; null only during preparation
`RevokedAt`	datetime		Immediate revocation boundary
`Status`	select	yes	Draft, Active, Revoked, Expired
`Reason`	longtext	yes	Business purpose, subject and least required fields; actual-person constraints survive delegation

HRChangesVersioned employee/lifecycle/master/policy proposal; only approved current content creates immutable history.transaction

Field	Type	Required	Details
`ChangeNumber`	text	yes	Stable action identity
`Kind`	select	yes	Hire, Rehire, Promotion, Transfer, ManagerChange, LOAStart, LOAReturn, Termination, TerminationCancellation, Correction, ProfileChange, MasterChange, PolicyPublish, LeaveAdjustment, PositionCapacity, AccessChange
`Employee`	reference		→ Employees
`TargetTable`	text	yes	Validated declared target, appropriate to Kind
`TargetID`	text	yes	Stable target identifier; not display/email matching
`BeforeValues`	longtext	yes	Protected prior values/version; follows classification and retention rules
`AfterValues`	longtext	yes	Exact proposed values and downstream scope
`ContentVersion`	number	yes	Material revision
`ContentHash`	text	yes	Exact reviewed content/fields/effective boundary
`ExpectedVersion`	number	yes	Optimistic current record/interval version
`EffectiveDate`	date	yes	First local date new state applies; termination date is first nonemployed date
`EffectiveAt`	datetime	yes	Timezone-resolved effective boundary
`PreparedBy`	reference	yes	→ Users
`MaterialEditors`	longtext	yes	Actual person IDs excluded from approval
`RequestedAt`	datetime	yes	Actual request time
`Decision`	reference		→ ApprovalDecisions
`TechnicalDecision`	reference		→ ApprovalDecisions. Additional independent Admin deployment/configuration sign-off when required, never substitute for HR domain approval
`AppliedAt`	datetime		Actual application time; distinct from effective historical boundary
`Status`	select	yes	Draft, Submitted, Approved, Scheduled, Applied, Rejected, Cancelled, Corrected
`Corrects`	reference		→ HRChanges
`Delegation`	reference		→ AccessGrants
`SourceKey`	text	yes	Unique namespace/source/action identity
`SourceMode`	select	yes	Native, MigrationHistory
`MigrationBatch`	reference		→ MigrationBatches
`AuthorizationMode`	select	yes	DomainApproval, PermittedProfileEdit. The latter is restricted to enumerated self-service fields/records under current grants, not legal identity or employment facts
`RequestEvidence`	longtext		Subject's authenticated request/consent for permitted HR Specialist-assisted profile/contact edits; protected and auditable

ApprovalDecisionsImmutable actual-person decision bound to exact subject, revision, domain scope and conflict exclusions.transaction

Field	Type	Required	Details
`DecisionNumber`	text	yes	Unique target/revision/decision identity
`Kind`	select	yes	Hire, LifecycleChange, MasterChange, PolicyPublish, Leave, LeaveCancellation, LeaveCorrection, Readiness, ChecklistClose, TaskWaiver, DocumentReview, Retention, AccessGrant, Migration, TechnicalActivation
`TargetTable`	text	yes	Validated target table
`TargetID`	text	yes	Existing target or prepared unique identity
`ContentVersion`	number	yes	Reviewed revision
`ContentHash`	text	yes	Exact effect, scope and policy basis
`RequestedBy`	reference	yes	→ Users
`SubjectEmployee`	reference		→ Employees
`MaterialEditors`	longtext	yes	Actual IDs excluded from signing
`DecidedBy`	reference	yes	→ Users. Eligible human role and grant; distinct actual person from requester/editor and subject where conflict applies
`DecidedAt`	datetime	yes	Actual decision time
`Status`	select	yes	Approved, Rejected, Returned, Invalidated
`Delegation`	reference		→ AccessGrants. Cannot grant an otherwise absent approval role or self-approval
`Evidence`	longtext	yes	Domain policy/version, current scope, exceptions and reason

EmploymentSpellsDated employment episode for a stable employee identity, preserving rehire breaks and employer changes.transaction

Field	Type	Required	Details
`SpellNumber`	text	yes	Unique employee/employer/start episode
`Employee`	reference	yes	→ Employees
`Entity`	reference	yes	→ Entities
`StartDate`	date	yes	Inclusive planned/effective start
`EndDate`	date		Exclusive first nonemployed date; null for ongoing spell
`ActualStartAt`	datetime		Confirmed actual commencement; future approval alone is insufficient
`EndAt`	datetime		Actual effective termination boundary
`EmploymentType`	reference	yes	→ EmploymentTypes
`Status`	select	yes	Planned, Active, OnLeave, Ended, Cancelled
`HireChange`	reference	yes	→ HRChanges
`EndChange`	reference		→ HRChanges
`Predecessor`	reference		→ EmploymentSpells
`RehireEligible`	toggle		Reviewed eligibility on ended spell
`RecordVersion`	number	yes	Atomic episode interval version
`SourceMode`	select	yes	Native, MigrationHistory
`MigrationBatch`	reference		→ MigrationBatches
`CommencementConfirmedBy`	reference		→ Users. HR Specialist under delegated scope or HR Manager records actual start fact
`CommencementConfirmedAt`	datetime		Actual factual confirmation time, not automatic calendar-date proof

PositionAssignmentsOne whole-seat dated primary assignment per employee; approved future intervals reserve capacity without changing present headcount.transaction

Field	Type	Required	Details
`AssignmentNumber`	text	yes	Unique employee/position/effective interval
`Employee`	reference	yes	→ Employees
`Spell`	reference	yes	→ EmploymentSpells
`Position`	reference	yes	→ Positions
`StartAt`	datetime	yes	Inclusive
`EndAt`	datetime		Exclusive
`SeatUnits`	number	yes	Exactly1; no fractional FTE or concurrent primary assignment claim
`Status`	select	yes	Reserved, Active, Ended, Cancelled
`Change`	reference	yes	→ HRChanges
`Department`	reference	yes	→ Departments
`Location`	reference	yes	→ Locations
`EmploymentType`	reference	yes	→ EmploymentTypes
`Manager`	reference		→ Employees
`Entity`	reference	yes	→ Entities
`AcceptedAt`	datetime	yes	Capacity reservation decision time
`SourceMode`	select	yes	Native, MigrationHistory
`MigrationBatch`	reference		→ MigrationBatches
`SlotKey`	text	yes	Stable capacity slot matching VacancyEpisodes; no overlapping reserved/active interval on the same slot

VacancyEpisodesOne dated opening/fill episode per whole capacity slot; retained across refills and transfers.transaction

Field	Type	Required	Details
`VacancyNumber`	text	yes	Unique position/slot/opening episode
`Position`	reference	yes	→ Positions
`SlotKey`	text	yes	Stable whole-seat slot within approved capacity
`OpenedAt`	datetime	yes	Actual approved opening boundary
`FilledAt`	datetime		Actual effective assignment start, not incumbent original hire date
`Assignment`	reference		→ PositionAssignments
`ClosedAt`	datetime		Closure without fill, if withdrawn/retired
`Status`	select	yes	Open, Filled, Withdrawn, Frozen
`Change`	reference	yes	→ HRChanges
`DimensionSnapshot`	longtext	yes	Effective department/location/job-family at opening/fill for historical report

WorkCalendarsVersioned local holiday/nonwork date basis used only for day-based leave calculation.master

Field	Type	Required	Details
`CalendarCode`	text	yes	Calendar plus version identity
`Entity`	reference	yes	→ Entities
`CountryCode`	text	yes	Enabled ISO country
`Timezone`	text	yes	IANA local calendar zone
`HolidayDates`	longtext	yes	Validated ISO dates, full/partial scheduled-hour reduction and labels; no duplicate dates
`EffectiveFrom`	date	yes	Inclusive
`EffectiveTo`	date		Exclusive
`Change`	reference	yes	→ HRChanges
`Status`	select	yes	Draft, Active, Superseded

WorkSchedulesEffective employee work-pattern snapshot for leave dates; not time tracking or shift-roster software.master

Field	Type	Required	Details
`ScheduleNumber`	text	yes	Unique employee/interval/version
`Employee`	reference	yes	→ Employees
`Spell`	reference	yes	→ EmploymentSpells
`Calendar`	reference	yes	→ WorkCalendars
`StartDate`	date	yes	Inclusive
`EndDate`	date		Exclusive
`WeeklyHours`	longtext	yes	Dated weekday scheduled hours with explicit rest days; holidays from Calendar
`DateOverrides`	longtext		Approved positive/zero scheduled-hour overrides for named dates
`Change`	reference	yes	→ HRChanges
`Status`	select	yes	Draft, Approved, Superseded

LeavePoliciesEffective country/type/entity leave rule with explicit schedule, reservation, accrual and rollover semantics.master

Field	Type	Required	Details
`PolicyNumber`	text	yes	Versioned leave rule identity
`LeaveType`	reference	yes	→ LeaveTypes
`Entity`	reference	yes	→ Entities
`CountryCode`	text		Null global candidate within entity
`EmploymentType`	reference		→ EmploymentTypes
`EffectiveFrom`	date	yes	Inclusive
`EffectiveTo`	date		Exclusive
`LeaveYearStart`	text	yes	Month-day start, approved leap-day rule and year identity
`AccrualMethod`	select	yes	Annual, Monthly, PerPayPeriod, Lump
`AccrualRate`	number	yes	Days per eligible period/event; nonnegative
`AccrualSchedule`	longtext	yes	Boundary timing, approved external pay-period IDs/dates or lump entitlement events
`Proration`	longtext	yes	Explicit employment/type fraction, service-period overlap and rounding; no automatic universal part-time factor
`AnnualEarnCap`	number		Maximum positive earned/adjusted days per leave year
`CarryoverCap`	number	yes	Nonnegative limit on eligible unused balance
`CarryoverExpiryDays`	number		Finite expiry offset where policy applies; null means no configured expiry
`NegativeBalanceLimit`	number	yes	Nonnegative allowed overdraw magnitude;0 prohibits negative Available
`AdvanceReservationLimit`	number	yes	Additional finite future-year reservation authority before earnings post; does not count as accrued days
`RequiredApprover`	select	yes	Manager, HR Manager
`FractionPrecision`	number	yes	Approved decimal precision for day fractions
`EligibilityRules`	longtext	yes	Employment/date/country/type rules, documentation and absence threshold; EligibleForLeave false blocks unless independently approved explicit policy exception
`RolloverRules`	longtext	yes	Old-year reserved portions, source-bucket consumption, caps/expiry and cross-year allocation handling
`Change`	reference	yes	→ HRChanges
`Status`	select	yes	Draft, Active, Superseded

LeaveDaysFrozen daily fraction, leave-year and balance allocation with explicit reserved/taken/cancelled evidence.transaction

Field	Type	Required	Details
`DayNumber`	text	yes	Unique request/version/local-date/fraction identity
`Request`	reference	yes	→ LeaveRequests
`Employee`	reference	yes	→ Employees
`Date`	date	yes	Local leave date, inclusive request endpoints
`Schedule`	reference	yes	→ WorkSchedules
`Policy`	reference	yes	→ LeavePolicies
`Balance`	reference	yes	→ LeaveBalances
`ScheduledHours`	number	yes	Frozen approved work hours after holiday/nonwork reductions
`AbsentHours`	number	yes	Requested hours up to ScheduledHours;0 for nonwork dates
`Fraction`	number	yes	AbsentHours / ScheduledHours if positive schedule, otherwise0; full scheduled day is1 even for part-time
`ReservedFraction`	number	yes	Current unused committed fraction; effective ledger projection
`TakenFraction`	number	yes	Actual/policy-confirmed elapsed absence fraction
`CancelledFraction`	number	yes	Released unused request portion
`FundingBuckets`	longtext	yes	Frozen earned/carryover/advance portions and expiries; expiry cannot erase a reserved source silently
`Status`	select	yes	Calculated, Reserved, Approved, Taken, Cancelled, Corrected
`ConfirmedBy`	reference		→ Users. Employee or assigned Manager factual absence confirmation; null only for expressly approved elapsed-day service policy
`ConfirmedAt`	datetime		Actual confirmation; automatic elapsed-day confirmation must be explicit in approved policy and attributable
`SourceMode`	select	yes	Native, MigrationHistory
`ConfirmationMode`	select	yes	Unconfirmed, Human, PolicyElapsedDay

LeaveEntriesAppend-only signed day ledger; each business effect changes explicit balance buckets atomically.transaction

Field	Type	Required	Details
`EntryNumber`	text	yes	Unique employee/type/year/policy/period/action or daily request effect
`Balance`	reference	yes	→ LeaveBalances
`Day`	reference		→ LeaveDays
`Policy`	reference	yes	→ LeavePolicies
`Kind`	select	yes	Opening, Accrual, CarryIn, CarryOut, CarryExpiry, Reserve, Release, Take, TakeReversal, Adjustment, AccrualReversal
`AccruedDelta`	number	yes	Signed change to Accrued
`CarryoverDelta`	number	yes	Signed change to Carryover
`TakenDelta`	number	yes	Signed change to Taken
`PendingDelta`	number	yes	Signed change to Pending; Take moves equal amount Pending down/Taken up
`PeriodKey`	text	yes	Unique eligibility/earn event or leave-day action; no duplicate accrual/release
`EffectiveDate`	date	yes	Leave-year/period effective date
`PostedAt`	datetime	yes	Actual atomic ledger commit
`ActorUser`	reference	yes	→ Users. Responsible actor/service scope; service cannot invent approval
`Decision`	reference		→ ApprovalDecisions
`ReversalOf`	reference		→ LeaveEntries. Bounded opposite original contribution, once
`Status`	select	yes	Posted
`SourceMode`	select	yes	Native, MigrationBaseline
`MigrationBatch`	reference		→ MigrationBatches
`TransferDays`	number	yes	Nonnegative rollover amount for CarryOut/CarryIn;0 for other kinds; old closed-year marker does not spend historic balance again
`Counterpart`	reference		→ LeaveEntries. Paired old-year CarryOut/new-year CarryIn identity; both committed once
`FundingEvidence`	longtext	yes	Exact source earned/carryover/advance buckets and prior effect IDs; bounded reversals cannot free an unrelated allocation

PolicyAssignmentsOne exact published policy version/content obligation for one employee/spell.transaction

Field	Type	Required	Details
`AssignmentNumber`	text	yes	Unique policy-version/employee/spell obligation
`Employee`	reference	yes	→ Employees
`Spell`	reference	yes	→ EmploymentSpells
`Policy`	reference	yes	→ CompanyPolicies
`Version`	text	yes	Frozen published Version
`ContentHash`	text	yes	Exact assigned file hash
`EffectiveFrom`	date	yes	Eligibility start
`AssignedAt`	datetime	yes	Actual assignment creation
`DueDate`	date	yes	Local acknowledgment due date
`DaysOutstanding`	formula	yes	fx: elapsed local days since assignment while pending; freezes at completion
`AcknowledgedBy`	reference		→ Users. Actual employee self identity; no default proxy
`AcknowledgedAt`	datetime		Actual acceptance time
`Receipt`	reference		→ EmployeeDocuments
`Status`	select	yes	Pending, Acknowledged, Overdue, Superseded, Cancelled
`ReminderState`	longtext	yes	Unique assignment/version/offset/channel keys, actual delivery and stop evidence
`SourceMode`	select	yes	Native, MigrationHistory
`MigrationBatch`	reference		→ MigrationBatches

DocumentRequirementsConfigured effective evidence requirement and access class, without a legal-compliance verdict.master

Field	Type	Required	Details
`RequirementCode`	text	yes	Versioned requirement identity
`Entity`	reference	yes	→ Entities
`AudienceRules`	longtext	yes	Validated country/type/department/position/employee criteria and precedence
`DocumentType`	select	yes	TaxForm, RightToWork, Visa, WorkPermit, Contract, NDA, PolicyAck, Certification, Medical, Other
`Classification`	select	yes	GeneralHR, Identity, Tax, Medical, PersonalContact, PolicyReceipt, Qualification
`SafeLabel`	text	yes	Neutral operational label appropriate for permitted manager notification
`ManagerVisible`	toggle	yes	Allows safe status/expiry only, not sensitive content/type/reason
`VerificationRules`	longtext	yes	Acceptable evidence/version/expiry/reviewer/independence and renewal conditions
`ReminderSchedule`	longtext	yes	Configured offsets, recipient classes and stop conditions
`RetentionRule`	longtext	yes	Approved jurisdiction/entity class rule, trigger and hold handling
`EffectiveFrom`	date	yes	Inclusive
`EffectiveTo`	date		Exclusive
`Change`	reference	yes	→ HRChanges
`Status`	select	yes	Draft, Active, Superseded

DocumentAssignmentsScoped employee requirement result linked to reviewed current evidence; safe alerts are separate from files.transaction

Field	Type	Required	Details
`AssignmentNumber`	text	yes	Unique employee/spell/requirement-version
`Employee`	reference	yes	→ Employees
`Spell`	reference	yes	→ EmploymentSpells
`Requirement`	reference	yes	→ DocumentRequirements
`Document`	reference		→ EmployeeDocuments
`SafeLabel`	text	yes	Copied approved neutral label
`ManagerVisible`	toggle	yes	Frozen requirement visibility; current role scope still checked
`AssignedAt`	datetime	yes	Actual assignment time
`DueDate`	date		Required evidence date
`ExpirationDate`	date		Verified linked evidence expiry; null is not expired
`Status`	select	yes	Missing, PendingReview, Verified, ExpiringSoon, Expired, Revoked, Waived, Superseded
`VerifiedBy`	reference		→ Users
`VerifiedAt`	datetime		Actual evidence review
`Decision`	reference		→ ApprovalDecisions. Required review/waiver evidence under applicable policy
`ReminderState`	longtext	yes	Deduplication/actual outcome/stop records for neutral alerts
`SourceMode`	select	yes	Native, MigrationHistory
`MigrationBatch`	reference		→ MigrationBatches

ChecklistTemplatesImmutable reviewed lightweight task template, not a separate ITSM system.master

Field	Type	Required	Details
`TemplateCode`	text	yes	Unique name/version
`Type`	select	yes	Onboarding, Offboarding, Transfer, Rehire
`Version`	text	yes	Published template version
`AudienceRules`	longtext	yes	Entity/role/location/employment applicability
`TaskDefinitions`	longtext	yes	Stable task keys, allowed category/assignee/required/due offset/start-blocking/waiver/provider outcome rules
`ContentHash`	text	yes	Exact task definition/version hash
`Change`	reference	yes	→ HRChanges
`Status`	select	yes	Draft, Active, Superseded

ChecklistTasksStable assigned task with actual completion/waiver/external outcome evidence and minimal participant data access.transaction

Field	Type	Required	Details
`TaskNumber`	text	yes	Unique checklist/template-version/task key
`Checklist`	reference	yes	→ OnboardingChecklists
`TaskKey`	text	yes	Stable template key
`Title`	text	yes	Safe task label
`Category`	select	yes	HR, IT, Facilities, Manager, Employee, PayrollHandoff, Other
`AssignedTo`	reference	yes	→ Users. Scoped Employee/task participant or integration owner, not a new broad role
`Required`	toggle	yes	Required closure item
`RequiredForStart`	toggle	yes	Blocks readiness/start unless explicitly waiver-eligible and approved
`WaiverAllowed`	toggle	yes	Reviewed template policy
`DueDate`	date	yes	Local task due date
`Status`	select	yes	Pending, InProgress, Completed, Overdue, Waived, Cancelled, Blocked
`CompletedBy`	reference		→ Users
`CompletedAt`	datetime		Actual completion time, not request/acknowledgment
`CompletionEvidence`	longtext		Subject-scoped evidence or authoritative external outcome ID
`Decision`	reference		→ ApprovalDecisions. Independent HR Manager waiver/exception
`IntegrationEvent`	reference		→ IntegrationEvents
`ContentVersion`	number	yes	Immutable accepted task basis; material changes require reviewed successor
`AccessGrant`	reference		→ AccessGrants. Narrow subject/task visibility, never general HR data

RetentionActionsReviewed deletion/retention/hold action with actual protected-store outcome and minimal audit tombstone.transaction

Field	Type	Required	Details
`RetentionNumber`	text	yes	Stable target/version/action identity
`Employee`	reference	yes	→ Employees
`TargetTable`	text	yes	Validated protected source table/object
`TargetID`	text	yes	Exact record/object version
`Action`	select	yes	Hold, ReleaseHold, Retain, Delete, Anonymize
`RuleSnapshot`	longtext	yes	Approved entity/class rule, trigger, scope and exceptions
`EligibleAt`	datetime		Earliest permitted action time; not inferred from employment status alone
`RequestedBy`	reference	yes	→ Users
`RequestedAt`	datetime	yes	Actual request
`Decision`	reference		→ ApprovalDecisions. Independent HR Manager, excludes requester/material editors
`ExecutedBy`	reference		→ Users. Scoped operator/service after valid decision
`ExecutedAt`	datetime		Actual confirmed deletion/hold execution
`OutcomeEvidence`	longtext		Store result and minimal no-content audit; unclear outcome remains unresolved
`Status`	select	yes	Draft, Submitted, Approved, Held, Requested, Confirmed, Uncertain, Rejected

IntegrationEventsAuthenticated inbound fact and outbound request/outcome identity; external status cannot rewrite HR-approved employment.transaction

Field	Type	Required	Details
`IntegrationNumber`	text	yes	Stable configured namespace/event/action identity
`Direction`	select	yes	Inbound, Outbound
`System`	text	yes	Verified external IdP/payroll/ATS/benefits/document/task system
`ExternalID`	text	yes	Stable request/provider subject/source event ID
`Action`	text	yes	Explicit allowed field/effect owner and mapping version
`PayloadHash`	text	yes	Same key changed payload conflicts
`Employee`	reference		→ Employees
`Change`	reference		→ HRChanges
`ReceivedAt`	datetime	yes	Actual ingress/prepared intent
`Authenticated`	toggle	yes	Verified source identity before processing
`Status`	select	yes	Prepared, Verified, Sent, Acknowledged, Confirmed, Uncertain, Rejected, Conflict
`ExternalResultID`	text		Authoritative external object/outcome identity
`ConfirmedAt`	datetime		Actual confirmation, not a transport200
`ReconciledBy`	reference		→ Users
`Evidence`	longtext	yes	Mapping, source watermark, actual provider state and corrections
`SourceMode`	select	yes	Native, MigrationHistory
`MigrationBatch`	reference		→ MigrationBatches

MigrationBatchesIndependently reviewed nonposting HR cutover preserving people, employment, obligations and unresolved external work.transaction

Field	Type	Required	Details
`BatchNumber`	text	yes	Unique source/cutoff/import identity
`SourceNamespace`	text	yes	Original identity namespace
`Cutoff`	datetime	yes	Agreed old/new effect boundary
`Manifest`	longtext	yes	Stable source IDs/hashes and mapped person/spell/seat/document/policy/task identities
`ControlTotals`	longtext	yes	People/spell/occupancy, leave buckets/reservations, evidence obligations and external outcomes
`SourceWatermarks`	longtext	yes	Previously executed and still unresolved external action identities
`PreparedBy`	reference	yes	→ Users
`Decision`	reference		→ ApprovalDecisions. Independent HR Manager domain approval
`TechnicalDecision`	reference		→ ApprovalDecisions. Independent Admin import/access sign-off where policy requires
`PreparedAt`	datetime	yes	Actual preparation
`ActivatedAt`	datetime		After all controlled passes and reconciliation
`Status`	select	yes	Draft, Validated, Submitted, Approved, Activated, Rejected
`LeaveBaselineMethod`	select	yes	NetBucketsWithReservedDetails
`Reconciliation`	longtext	yes	Historic statuses do not create new accounts, accruals, notifications or lifecycle effects

OrgSummariesDeclared safe current/as-of reporting projection for organization and headcount screens.master

Field	Type	Required	Details
`SummaryNumber`	text	yes	Unique projection type/scope/cutoff
`Kind`	select	yes	DepartmentTree, LocationHeadcount
`Department`	reference		→ Departments
`Location`	reference		→ Locations
`Entity`	reference	yes	→ Entities
`CountryCode`	text		Governed ISO location code
`ManagerTree`	longtext		Peer-safe names/titles/manager IDs only, cycle-checked
`Headcount`	number	yes	Distinct applied employed people Active/OnLeave at cutoff
`DepartmentCount`	number	yes	Distinct effective departments in eligible location population
`DirectReports`	number		Current employed direct-report count for scoped manager nodes
`AsOf`	datetime	yes	Exact effective cutoff
`Snapshot`	reference		→ OrgChartSnapshots
`AccessClass`	select	yes	OrgDirectory, HRRestricted
`Coverage`	select	yes	Complete, Incomplete

ERP•AI workspace

Start now Core HR

Create your ERP.AI account and get started with Proto.

Start now Download agent

Previous · reference 2 of 6Reports Next · reference 4 of 6Integrations

Core HR

Modules

Core HR

Processes

Core HR

Industries

Core HR

Reference

Core HR

Data model

How the model is organised

People and organization

Identity and authorization

Employment changes

Leave

Policies and documents

Joining and leaving

Reporting and handoffs

Keys and references

Migration order

Tables

Start now Core HR

Core HR

Modules

Core HR

Processes

Core HR

Industries

Core HR

Reference

Data model

How the model is organised

People and organization

Identity and authorization

Employment changes

Leave

Policies and documents

Joining and leaving

Reporting and handoffs

Keys and references

Migration order

Tables

Start now Core HR

Your Privacy, Your Choice

Manage Your Cookie Preferences