Customer 360 & Real-Time Risk Intelligence Platform  ·  View 05 of 20

Data Architecture — Medallion Zones

How data is zoned by ownership, rebuildability and retention, from landing through to business-ready gold tables.

Editable source SVG draw.io All views
Lakehouse — Delta Lake on Object Storage
Lakehouse — Delta Lake on Object Storage
Landing — as received, 7 day TTL
Landing — as received, 7 day TTL
Raw Files & Payloads
Exactly as delivered
Raw Files & Payloads...
Quarantine
Rejected records
Quarantine...
Bronze — immutable history, platform owned
Bronze — immutable history, platform owned
CDC Change Log
Before / after images
CDC Change Log...
Event History
Append only, partitioned
Event History...
Reference Snapshots
Bureau, sanctions
Reference Snapshots...
Silver — conformed, domain owned
Silver — conformed, domain owned
Party & Identity
SCD2, matched keys
Party & Identity...
Account & Product
Current + history
Account & Product...
Transactions
Deduped, standardised
Transactions...
Interactions
Sessions, channels
Interactions...
Gold — business ready, product owned
Gold — business ready, product owned
Customer 360 Profile
One row per customer
Customer 360 Profile...
Risk & Exposure Mart
Risk & Exposure Mart
Feature Tables
Point in time correct
Feature Tables...
KPI Aggregates
Daily, monthly
KPI Aggregates...
Catalog & Retention Policy
Class, owner, TTL, lineage
Catalog & Retention Policy...
ingest
ingest
clean + dedup
clean + dedup
merge SCD2
merge SCD2
aggregate
aggregate
golden record
golden record
schema fail
schema fail
Data Architecture — Medallion Zones and Ownership
Data Architecture — Medallion Zones and Ownership
Data store
Data store
Risk / gap
Risk / gap
Security / platform
Security / platform
synchronous
synchronous
failure / alternate
failure / alternate
Bronze is never rewritten; every downstream zone is rebuildable from it by replay.
Bronze is never rewritten; every downstream zone is rebuildable from it by replay.
v 1.0 · owner Enterprise Data Architecture · date 2026-08
v 1.0 · owner Enterprise Data Architecture · date 2026-08
Text is not SVG - cannot display

Zone contract

  • Landing: exactly as received, 7-day TTL, platform owned
  • Bronze: append-only, never rewritten, 10 years, WORM-protected
  • Silver: conformed and deduplicated, domain owned; Gold: product owned

Rebuildability

  • Every silver and gold table can be regenerated from bronze plus versioned code
  • That property is what makes logic changes and restatements safe
  • Gold retention is 3 years because it is derived, not because it is unimportant

Format decision

  • Delta Lake for ACID merges, time travel and column-level lineage support
  • Iceberg is a viable alternative; the decision turns on the chosen compute vendor
  • Whichever is chosen, open table format is mandatory — no proprietary storage