DataPrivacy & Access

Data Privacy Layer

Role-based access, data classification, encryption, sensitive-field masking and retention — all in one console.

RBAC enforcement

5 roles · least-privilege

active

Classification coverage

100% of fields tagged

active

Encryption

AES-256 at rest & in transit

active

Sensitive fields masked

7 rules active

active

Retention policies

6 categories

active

Roles

Five built-in roles with least-privilege defaults. Click any cell to toggle a permission.

Admin

Full administrative control across the workspace.

Manager

Approve decisions, manage tasks & directors.

AI Director

Auto-generated agents — read scoped data only.

Viewer

Read-only access to non-confidential data.

Auditor

Read-only across all classifications, append-only logs.

Access matrix

Resource × role × action. Confidential and restricted resources are highlighted.

Resource	Class	Admin	Manager	AI Director	Viewer	Auditor
Live KPIs	internal
Decisions & rationales	confidential
Financial detail (GL, bank)	confidential
HR records (PII)	restricted
Audit & access logs	confidential
Public board pack	public

Legend: V = view · C = create · E = edit · D = delete · X = export

AI Director data scope

Per-director allow / restrict lists, applied on top of the director role above.

Omar Al-Fahad

AI CFO

Allowed

SAP S/4HANA FinanceBank StatementsSales OrdersProcurement SpendBudget Files

Restricted

MESIoT PlatformHR PII

Sara Al-Nasser

AI COO

Allowed

MESIoT PlatformQMSWMSSAP S/4HANA Operations

Restricted

Bank StatementsHR PIILegal Documents

Khalid Al-Rashid

AI CIO

Allowed

All systems metadataIntegration logsCybersecurity dashboardsData quality

Restricted

Personal financial dataHR PII

Layla Al-Harbi

AI CHRO

Allowed

SAP SuccessFactorsLocal HR SystemTraining records

Restricted

GL AccountsBank StatementsCustomer PII

Faisal Al-Qahtani

AI Strategy Director

Allowed

Financial summaryOperations summaryStrategy docsMarket reports

Restricted

Transactional detailHR PII