RegRecord

Regulatory Record Keeping System

A regulatory record system with a full audit trail, a submission-workflow state machine, and cryptographic pseudonymization with strict separation-of-duties for re-identification.

Methods & contributions

• Pseudonymization — 32-byte secret salts, SHA-256/512 and HMAC/BLAKE2B keyed hashing, with re-identification gated by separation-of-duties.
• Audit trail — PL/SQL triggers capture immutable change history; purge logic protects records with re-id history.
• Submission workflow — explicit state machine for regulatory submission lifecycle.
• Compliance monitoring — Control-M automated checks in a UNIX environment.

Data flow

record → pseudo-ID (salt + keyed hash) → audit-logged store
      → submission state machine → compliance monitor

Technologies