One thing to think about when considering using a trigger: If the trigger is NOT used, then the audit may have to be done by the application. If you require that an audit trail be kept, then why not used a trigger? Can the application perform better than the DBMS? Without the triggers, there will be ways to circumvent the audit by using ad-hoc queries to get to the data.