Data Classification & Handling

Define your tier policies (Public / Internal / Confidential / Restricted), inventory the datasets that exist in your environment, and assign each one to a tier. The matrix view renders the cross-product as a handling reference. localStorage; everything stays in your browser.

Pairs with Sensitive Data Detector (find PII / secrets in content) and the GRC hub (NIST PR.DS / ISO 27001 A.5.12 / ISO 42001 A.7).

Public

—

Internal

—

Confidential

—

Restricted

—

Public

Information already published or intended for public consumption. Loss has no confidentiality impact; integrity / availability still matter.

Access policyExamples (comma-separated)Encryption at restEncryption in transitRetention (months, or 'indefinite')External sharingAudit loggingGeo restrictionDLP enforcement

Internal

Information for internal use across the organisation. Disclosure would not cause material harm but is undesirable.

Access policyExamples (comma-separated)Encryption at restEncryption in transitRetention (months, or 'indefinite')External sharingAudit loggingGeo restrictionDLP enforcement

Confidential

Information that would harm the organisation, partners, or customers if disclosed. Limited to those with a need-to-know.

Access policyExamples (comma-separated)Encryption at restEncryption in transitRetention (months, or 'indefinite')External sharingAudit loggingGeo restrictionDLP enforcement

Restricted

Regulated or otherwise highly sensitive — PII / PHI / PCI / secrets / IP-critical material. Disclosure is a notifiable event.

Access policyExamples (comma-separated)Encryption at restEncryption in transitRetention (months, or 'indefinite')External sharingAudit loggingGeo restrictionDLP enforcement

References

Data Classification & Handling

Pairs with Sensitive Data Detector (find PII / secrets in content) and the GRC hub (NIST PR.DS / ISO 27001 A.5.12 / ISO 42001 A.7).