Customer 360 & Real-Time Risk Intelligence Platform  ·  View 14 of 20

Governance Controls by Zone

Which control applies where — classification, PII protection, access, lineage, retention and quality, mapped across every data zone.

Editable source SVG draw.io All views
Landing
Landing
Bronze
Bronze
Silver
Silver
Gold
Gold
Consumption
Consumption
Classification
Classification
Auto scan on arrival
Auto scan on arrival
Tag PII columns
Tag PII columns
Sensitivity inherited
Sensitivity inherited
Business terms bound
Business terms bound
Label on export
Label on export
PII protection
PII protection
Encrypt at rest
Encrypt at rest
Tokenise PAN & ID
Tokenise PAN & ID
Hash join keys
Hash join keys
Dynamic masking
Dynamic masking
Purpose check
Purpose check
Access control
Access control
Platform team only
Platform team only
Engineers, no read PII
Engineers, no read PII
Domain owned grants
Domain owned grants
Role based, attested
Role based, attested
Row filters by region
Row filters by region
Lineage & metadata
Lineage & metadata
Source manifest
Source manifest
Offset & file ancestry
Offset & file ancestry
Job level lineage
Job level lineage
Column lineage
Column lineage
Report to source trace
Report to source trace
Retention & records
Retention & records
7 day TTL
7 day TTL
10 years, WORM
10 years, WORM
7 years
7 years
Rebuildable, 3 years
Rebuildable, 3 years
Extracts expire 90 d
Extracts expire 90 d
Quality assurance
Quality assurance
Control totals
Control totals
Schema conformance
Schema conformance
Dedup & integrity
Dedup & integrity
Reconciliation
Reconciliation
Freshness SLA
Freshness SLA
Governance Controls by Data Zone
Governance Controls by Data Zone
Security / platform
Security / platform
Decision point
Decision point
Application we own
Application we own
Interface / broker
Interface / broker
Data store
Data store
Every cell is an implemented control with a named owner; blank cells would be findings, not omissions.
Every cell is an implemented control with a named owner; blank cells would be findings, not omissions.
v 1.0 · owner Data Governance · date 2026-08
v 1.0 · owner Data Governance · date 2026-08Text is not SVG - cannot display

Why a matrix

  • A flow diagram hides gaps; a matrix makes an empty cell visibly a finding
  • Each cell names an implemented control with an accountable owner
  • The same grid is used as the evidence template for internal audit

Retention posture

  • Bronze 10 years WORM; silver 7 years; gold 3 years because it is rebuildable
  • Landing expires at 7 days — it is a staging area, not a store
  • Consumption extracts expire at 90 days to limit uncontrolled copies

Lineage depth

  • Job-level lineage from bronze onwards; column-level lineage in gold
  • Offset and file ancestry recorded in bronze so any row traces to its source event
  • Report-to-source trace is a supported query, not a manual reconstruction
Solution Architecture v1.0 · Enterprise Data Architecture · 2026-0814-governance-controls-matrix