Skip to content

Confidentiality

As of now Agoora does not support any dedicated way on how to classify data within a topic for confidentiality. However, as data in Kafka topics are also data assets, a proper classification is needed to achieve the appropriate handling. Agoora supports the management of tags which can be used to classify the data. Additionally for highly classified data Agoora also supports security trimming so that only certain people have access to the description within Agoora. This does not help with the management of Kafka however, thus we always recommend to add a classification based on tags.

We suggest using the following classification:

Identifier Text example description
C4 Public public documentation, API, Open Data No special restrictions needed. Can be made public without further consideration
C3 Internal Use Employee Handbook Free for internal use. No special restrictions to protect against access of internal entities. Has a minimal impact on business if leaked.
C2 Restricted pricing, marketing materials Access to data requires special privileges. Should not be freely shared with third parties and allowing others access needs some consideration. Will have a negative impact on business if disclosed.
C1 Confidential health data, PI data, trade secrets Access to data is highly restricted. Should only be shared with key people on a need-to-know basis and handled with care. Significant damage to business if disclosed

As tags we suggest to either use the short form (e.g. C1), the text form (e.g. Confidential), or a combined form (e.g. C1-Confidential). Use whichever suits your usecase best and whichever is best understood in your context.