Glossary · governance

Data-access negotiation

Agreeing with four kinds of owner (data, security, legal and platform) what data an AI system may use, and under which controls.

Data-access negotiation is the work of agreeing, before a build starts, which data an AI system may read, for what purpose, for how long and under which controls. It is a negotiation because four different owners each hold a part of the answer: the data owner, the security team, the legal or privacy function and the platform team that runs the infrastructure.

In my experience, projects often stall at this step. The model is available. The records are not, or they arrive after the schedule has been set.

In practice

I bring the four owners to one table in the first two weeks of the readiness review. For each data source the workflow needs, we write down the purpose, the fields used, the retention period, where the data may be processed and whether it may leave the client's environment. Each answer is recorded in the decision log, so the agreement can be checked later.

The negotiation is also where the boundaries of retrieval are set. A system that can search everything will eventually show something it should not, so the permissions must be inherited from the source systems, not granted to the agent.

Example

[Composite] A bank's collections team wanted an agent to summarise customer correspondence. Legal allowed the summaries but not the raw text; security required that the agent run inside the bank's tenant. The agreed design stored only summaries, with a retention period of thirty days, and it was approved in one meeting because each concern had an owner in the room.

Common mistakes

  • Starting the negotiation after the design is fixed. Access constraints change the design.
  • Negotiating with one owner and assuming the others agree. Each of the four must sign.
  • Granting broad read access for convenience and planning to tighten it later. Later rarely comes.

Related terms

Cite this definition

Data-access negotiation. Mayur Patil, mayurpatil.ai, updated 2026-11-01. https://mayurpatil.ai/glossary/data-access-negotiation/

Enquiry

Tell me about the work

The use case, where it is blocked and who is involved. I reply with a suggested starting point. Or email hello@mayurpatil.ai.

Goes to my CRM and my inbox. No newsletter, no sharing. See Privacy (opens in a new tab).

Close