Data-model governance
Stops each squad's agents inventing incompatible vocabularies and unsafe data handling across the portfolio. The rules every data model follows.
The rules
- Naming conventions — consistent entity/field naming across products.
- Mandatory PII tagging — every field classified (public / internal / client-confidential / regulated-PII); nothing untagged.
- Data minimisation — collect only what's needed; justify sensitive fields.
- ACORD alignment — map to the standard where it applies, so products interoperate.
- Versioning & migration — schema changes are versioned; migrations are irreversible actions needing sign-off.
The machine-readable design context pack loaded into UI-producing agent sessions is governed by the design-system standard, not here.
Standards referenced: ACORD, UK GDPR.