Every reading, certification and incident is captured as a record that reads the same in five years as it does today. Months freeze. History is never re-scored against today's rules.
Most systems recompute history whenever the rules change, so last March quietly re-scores itself against a policy written in August. OnDeck freezes each month when it closes. What you hand an inspector is what was true at the time.
The MAHC binder is for the health inspector. The insurance binder is for your carrier at renewal. The training report is for the person above you. They are different documents because they answer different questions.
Every submission carries the staff member, the device type and the timestamp. On a shared pool-deck iPad that still holds, because the kiosk asks who is submitting before it accepts anything.
The same entries as the index — there is only one description of any feature on this site.
The four hand-it-to-someone documents, sorted by the one question a director can always answer: who is going to read this.
The day-of-shift compliance packet for one staff member — everything proving they're cleared to work.
Frozen monthly snapshots. A closed month is never re-scored against today's rules — which is what makes it defensible.
Every submission, by whom, on what device, at what time. Nothing is anonymous.
Staff member, device type, timestamp and IP on every submission. Traceable back to the source.