Data controls

Data controls should be chosen per workspace and enforced throughout ingestion, storage, retrieval, execution, and export. Define the processing and storage region, who can access which entities and artifacts, how long each category is retained, and how deletion requests are handled.

Use redaction when a value should not be persisted in traces. Use retention and deletion rules for data that may be stored but should expire. Before connecting a source or an export, confirm which data categories and legal obligations apply.