# DAT-10 Memory architecture documentation

Domain: DAT Data Protection & Privacy · HI-AAF v1.3 · Public review · https://humanintel.net/standard/dat/dat-10

For agents with persistent or session memory, the memory architecture is documented: storage type, scope, write paths, read paths, eviction or decay policy, and access controls.

For agents with persistent or session memory, the memory architecture is fully documented as part of the Behavior Charter (GOV-02). Documentation covers storage type, scope (per-user, per-session, per-tenant, or global), write paths, read paths, eviction or decay policy, and access controls. This documentation is the foundation for assessing memory-related risks across INP, DAT, and MON domains.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for DAT-10: Memory architecture documentation exists for all agents with persistent or session memory; documentation is current within the Behavior Charter review cadence; access controls are verified by testing.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Memory architecture documentation exists for all agents with persistent or session memory.
- Documentation is current within the Behavior Charter review cadence.
- Access controls are verified by testing.

## Framework mappings

- NIST AI RMF: MAP 2.3
- ISO/IEC 42001: A.7.3, A.7.4
- SOC 2 (TSC): CC6.1
- EU AI Act: Art. 10(2)
- Singapore: MAIGF Data, AI Verify Data Governance

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cites GOV-02 Agent Behavior Charter: https://humanintel.net/standard/gov/gov-02
- Cited by INP-10 Retrieval and memory write authentication: https://humanintel.net/standard/inp/inp-10
- Glossary: Memory: https://humanintel.net/standard/glossary#memory

## Cite this control

Human Intelligence. HI-AAF v1.3, DAT-10 Memory architecture documentation. Public review edition, July 2026. https://humanintel.net/standard/dat/dat-10