Sensitive data: Implementation and evidence

Specifies data flows, enforcement points, records, tests, audit evidence, and operational ownership for sensitive data. It fixes adoption boundaries and observable failure evidence while keeping environment-specific limits configurable.

Published Sep 12, 2026