Name owners before you buy another catalogue
A lineage tool without accountable stewards becomes another unread inventory. Start with decisions and names.
Notes
Field writing from governance audits
Short pieces on what we see when fintech platforms are asked who owns the data, how long it lives, and who can export it.
When retention settings disagree with the policy PDF
Policies promise 90 days. Jobs keep seven years. Here is how we sample the gap without boiling the ocean.
Tracing transfers that leave Hong Kong
Failover regions, analytics SDKs, and group shared services all move data. Map the path before you argue the legal basis.
Access reviews that actually remove access
Quarterly attestations that never revoke a role are not governance. Measure removals, not signatures.