From 737397ebec891480dddec417816e4cabdac9d7b0 Mon Sep 17 00:00:00 2001 From: Defame1297 Date: Mon, 25 May 2026 20:25:28 +0000 Subject: [PATCH] chore: reformat data classification table in ai-constitution MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Whitespace-only change — padded columns for readability. No content change. Co-Authored-By: Claude Sonnet 4.6 --- docs/ai-constitution.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/docs/ai-constitution.md b/docs/ai-constitution.md index ec0a749..5aa9ecb 100644 --- a/docs/ai-constitution.md +++ b/docs/ai-constitution.md @@ -51,12 +51,12 @@ Everything that enters an AI prompt is subject to the same classification obliga ### Data Classification for AI Systems -| Tier | Label | Description | AI Rule | -|---|---|---|---| -| 1 | **Public** | Publicly available data | No restrictions | -| 2 | **Internal** | Operational data, non-personal system data, anonymised logs | Enterprise AI tools only; not consumer/free-tier products | -| 3 | **Confidential** | Proprietary source code, system architecture, IP, identifiable personal data | Enterprise AI with explicit data-not-used-for-training contractual commitment; GDPR legal basis required for personal data | -| 4 | **Restricted** | GDPR Article 9 special categories (health, biometrics, ethnicity, religion, sexual orientation, political views), credentials, regulated financial data, data under professional secrecy | Never enters any AI context. Hard architectural prohibition. | +| Tier | Label | Description | AI Rule | +| ------| ------------------| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| ----------------------------------------------------------------------------------------------------------------------------| +| 1 | **Public** | Publicly available data | No restrictions | +| 2 | **Internal** | Operational data, non-personal system data, anonymised logs | Enterprise AI tools only; not consumer/free-tier products | +| 3 | **Confidential** | Proprietary source code, system architecture, IP, identifiable personal data | Enterprise AI with explicit data-not-used-for-training contractual commitment; GDPR legal basis required for personal data | +| 4 | **Restricted** | GDPR Article 9 special categories (health, biometrics, ethnicity, religion, sexual orientation, political views), credentials, regulated financial data, data under professional secrecy | Never enters any AI context. Hard architectural prohibition. | **Consumer and free-tier AI products are incompatible with processing organisational or personal data.** Enterprise contracts with explicit data-not-used-for-training commitments are the minimum bar. Verify per provider; do not assume.