Who is both internal enough to get a copy of your HR database but external enough that their logs can't be changed as easily as a non-blockchain system's?
Send me a hash as new data is added to your DB and I cut you a cert... the next cert includes hash of the last cert plus the new hash you just gave me...