# DAT-02 Cross-tenant data isolation (Critical)

Domain: DAT Data Protection & Privacy · HI-AAF v1.3 · Public review · https://humanintel.net/standard/dat/dat-02

Cross-tenant data isolation is verified through automated tests on a documented cadence. Failures are treated as incidents.

For multi-tenant deployments, tenants' data is isolated and verified through automated tests on a documented cadence. A tenant cannot retrieve from or be influenced by another tenant's content. Isolation failures are treated as incidents under MON-07 and trigger immediate investigation. This is the data-layer complement to IAM-08's credential isolation.

Critical control: a Critical failure precludes HI-AAF Certification regardless of the maturity level achieved on any other control.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for DAT-02: Automated isolation tests run on a documented cadence (daily probes recommended); test results are retained; no isolation failure has occurred in the review period or all failures have been resolved and root-caused.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Automated isolation tests run on a documented cadence (daily probes recommended).
- Test results are retained.
- No isolation failure has occurred in the review period or all failures have been resolved and root-caused.

## Framework mappings

- ISO/IEC 42001: A.7.4
- SOC 2 (TSC): CC6.1, C1.1
- EU AI Act: Art. 10(2)
- Singapore: PDPA s.24, MAIGF Data, AI Verify Data Governance

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cites IAM-08 Multi-tenant credential isolation: https://humanintel.net/standard/iam/iam-08
- Cites MON-07 Agent-specific incident response: https://humanintel.net/standard/mon/mon-07
- Cited by DAT-11 Memory and retrieval isolation: https://humanintel.net/standard/dat/dat-11
- Glossary: Tenant: https://humanintel.net/standard/glossary#tenant

## Cite this control

Human Intelligence. HI-AAF v1.3, DAT-02 Cross-tenant data isolation. Public review edition, July 2026. https://humanintel.net/standard/dat/dat-02