1. A non-transitory computer-readable medium having instructions stored thereon that, when executed by a processor, cause the processor to report audit data, the reporting comprising: configuring, using a graphical user interface, metadata that defines one or more security conditions for a business object that includes data contained within a first database table; receiving, using the graphical user interface, a request from a user to retrieve audit data contained within a second database table, audit data including a history of one or more modifications to the business object data contained within the first database table; retrieving the audit data from the second database table even when the business object data contained within the first database table is deleted; and displaying, using the graphical user interface, the audit data to the user when the one or more security conditions for the business object are satisfied by the user.