4.8 Policy-Governed Sharing Without Centralised Data Routing [Dido Solutions, Inc Wiki]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== 4.8 Policy-Governed Sharing Without Centralised Data Routing ======
[[fxdemo:02-part:start | Go To Top ]]

The Logical Architecture supports policy-governed information sharing without requiring all protected information to pass through a single central policy server, release server, or gateway.

Policy-governed sharing is represented as a distributed logical capability. Logical Nodes may enforce [[dido:99_annexes:annex-b-terms-and-definitions:l:logical_policy_constraints|policy constraints]] near protected actions, request policy decisions from replicated decision capabilities, obtain attributes from policy information sources, receive policy baselines from policy administration capabilities, and record obligations, release actions, and [[dido:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] through audit and provenance relationships.

This principle supports data sovereignty and data residency. Full transaction detail may remain within an authorized local, institutional, national, or other residency domain, while authorized metadata, aggregate summaries, derived indicators, redacted views, masked views, exception views, or recipient-specific release products may move across boundaries under policy control.

The Logical Architecture defines these responsibilities at the PIM level. Later implementation profiles may realize them using DDS topics, APIs, gateways, policy engines, caches, services, or other mechanisms, but those mechanisms do not define the logical architecture.

----

<WRAP centeralign>
© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
</WRAP>