02 — Capability · BC-1250.50
Tenant Data Governance
Keep each customer's data where it promised to be, separate from everyone else's, retained for as long as agreed and exportable on request.
- Data Residency
- Tenant Isolation
- Data Portability
In scope
- Data residency and region pinning per tenant
- Logical and physical tenant isolation
- Retention, export and deletion on customer request
Out of scope
- Enterprise data governance and quality for the company's own data (see BC-750)
- Privacy regulation interpretation (see BC-140)
Decomposes into · 3
- BC-1250.50.10Data Residency ControlPin a tenant's data and processing to the regions it chose and prove it stays there.
- BC-1250.50.20Tenant Isolation AssuranceEnforce and test that no tenant can read, infer or affect another tenant's data, at every layer.
- BC-1250.50.30Retention, Export & DeletionApply agreed retention, hand customers a complete export on request and delete verifiably when required.