# DAT-11 Memory and retrieval isolation (Critical)

Domain: DAT Data Protection & Privacy · HI-AAF v1.3 · Public review · https://humanintel.net/standard/dat/dat-11

Memory stores, vector indexes, and retrieval surfaces are scoped such that one user, session, or tenant cannot read or influence another's stored content unless explicitly authorized. Isolation is verified by automated tests.

Memory stores, vector indexes, and retrieval surfaces are scoped such that one user, session, or tenant cannot read or influence another's stored content unless explicitly authorized. Isolation is verified by automated tests on a documented cadence. Isolation failures are treated as incidents under MON-07. This is the memory-layer complement to DAT-02's cross-tenant data isolation.

Critical control: a Critical failure precludes HI-AAF Certification regardless of the maturity level achieved on any other control.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for DAT-11: Isolation is enforced and verified by automated tests on a documented cadence; test results are retained; no isolation failure has occurred in the review period or all failures have been resolved.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Isolation is enforced and verified by automated tests on a documented cadence.
- Test results are retained.
- No isolation failure has occurred in the review period or all failures have been resolved.

## Framework mappings

- ISO/IEC 42001: A.7.4
- SOC 2 (TSC): CC6.1, C1.1
- EU AI Act: Art. 10(2)
- Singapore: PDPA s.24, MAIGF Data, AI Verify Data Governance

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Related

- Cites DAT-02 Cross-tenant data isolation: https://humanintel.net/standard/dat/dat-02
- Cites MON-07 Agent-specific incident response: https://humanintel.net/standard/mon/mon-07
- Glossary: Memory: https://humanintel.net/standard/glossary#memory
- Glossary: Tenant: https://humanintel.net/standard/glossary#tenant

## Cite this control

Human Intelligence. HI-AAF v1.3, DAT-11 Memory and retrieval isolation. Public review edition, July 2026. https://humanintel.net/standard/dat/dat-11