# DAT-01 Data classification scheme

Domain: DAT Data Protection & Privacy · HI-AAF v1.3 · Public review · https://humanintel.net/standard/dat/dat-01

A data classification scheme is applied to all data accessible to the agent. The agent's authorization is constrained by classification.

All data the agent may encounter is classified according to a documented scheme, typically public, internal, confidential, restricted, and the agent's authorization is constrained by classification. The agent cannot access data at a classification level above its authorization, and classification boundaries are enforced at the retrieval and prompt layers.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for DAT-01: Classification scheme is documented and applied to all data sources accessible to the agent; agent authorization levels are mapped to classification tiers; enforcement is tested as part of pre-deployment evaluation.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Classification scheme is documented and applied to all data sources accessible to the agent.
- Agent authorization levels are mapped to classification tiers.
- Enforcement is tested as part of pre-deployment evaluation.

## Framework mappings

- NIST AI RMF: MAP 2.3
- ISO/IEC 42001: A.7.3
- SOC 2 (TSC): CC6.1, C1.1
- EU AI Act: Art. 10(2)
- Singapore: MAIGF Data, AI Verify Data Governance

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Cite this control

Human Intelligence. HI-AAF v1.3, DAT-01 Data classification scheme. Public review edition, July 2026. https://humanintel.net/standard/dat/dat-01