Back to Policy Packs
Data Access Governance Policy
Pre-action governance for agent-initiated data access. Enforces controls based on data classification, sensitivity, entity access rights, and jurisdictional boundaries.
v1.0.0
Requirements
Required Capabilities
data.access
Minimum Assurance Level
L3
Required Limits
allowed_classifications
permissions
allowed_jurisdictions
max_rows_per_export
allowed_destination_jurisdictions
balance_inquiry_cap_usd
Enforcement Rules
These rules are automatically enforced when using this policy pack
classification_allowed
entity_type_allowed
jurisdiction_check
row_limit_enforced
data_locality_enforced
balance_inquiry_limited
Best Practices
- Cache /verify with ETag; 60s TTL
- Subscribe to status webhooks for instant suspend
- Log all data access attempts for Verifiable Attestation
- Implement data classification tagging for all resources
- Maintain entity access matrices for different data types
- Use jurisdiction-aware data routing for compliance
- Implement progressive disclosure for sensitive data access
- Monitor access patterns for unusual behavior
- Maintain audit trails for all data access operations
- Use encryption for data in transit and at rest
- Implement data retention policies based on classification