Policies and controls for data collection, use, storage, location, retention, and deletion.
Agent systems duplicate data across prompts, provider logs, retrieval indexes, memory, traces, caches, and generated artifacts. Governance maps each copy to purpose, owner, classification, permitted region, retention period, deletion mechanism, and audit evidence so a policy can be enforced rather than merely documented.