Data Classification Helper

Interactive guide to classify your data assets based on sensitivity and compliance requirements

Classification Levels Reference

Description: Information intended for public disclosure. No harm if exposed.

Examples: Marketing materials, public website content, press releases, product catalogs

Description: Information for internal use only. Low risk if exposed.

Examples: Internal memos, employee directories, general business processes, training materials

Description: Sensitive information requiring protection. Moderate risk if exposed.

Examples: Customer data, financial reports, business strategies, employee records, contracts

Description: Highly sensitive information with strict access controls. High risk if exposed.

Examples: PII, PHI, payment card data, trade secrets, merger & acquisition plans, legal documents

Description: Extremely sensitive information. Severe impact if exposed.

Examples: Government classified data, national security information, critical infrastructure data, executive compensation details

Answer these questions to get a recommended classification level for your data:

1. Does this data contain personal identifying information (PII)?

2. Does this data contain financial or payment information?

3. What would be the impact if this data was publicly disclosed?

4. Are there regulatory requirements for this data?

5. Who should have access to this data?

Next Steps: