Data
Classification, use, protection, provenance and evidence.
What Data means in practice
Data governance isn't about a new platform — it's about knowing what you have, who's responsible for it, and whether you can demonstrate that.
Classification & use
Knowing which data lives where, how sensitive it is, and what it's used for.
Protection & provenance
Protection that matches classification, with origin and onward sharing that stay traceable.
Evidence
Evidence of correct data handling as a byproduct of the work itself, not a separate exercise after the fact.
A recognisable pattern: data classification exists on paper, but doesn't match where sensitive data is actually used — especially once AI applications start processing it.
See Audit evidence in Use Cases & Outcomes for how this is addressed in practice.
One domain, the same operating model.
Data doesn't stand alone — it shares ownership, controls and evidence with the other domains. See how the 90-day approach makes that concrete.
See the 90-day approach→