Initial commit

compliance/data-map.yml

@@ -0,0 +1,35 @@
+# compliance/data-map.yml — PII field inventory
+# Generated by scripts/compliance/emit-data-map.mjs — do not edit manually.
+# Run `pnpm compliance:data-map` to regenerate.
+collections:
+  articles:
+    auth: false
+    piiFields: []
+    slug: articles
+  media:
+    auth: false
+    piiFields: []
+    slug: media
+  pages:
+    auth: false
+    piiFields: []
+    slug: pages
+  users:
+    auth: true
+    piiFields:
+      - category: identification-username
+        exportable: true
+        field: displayName
+        purpose:
+          - service-delivery
+        restrictable: true
+        source: field-tag
+      - category: contact-email
+        exportable: true
+        field: email
+        purpose:
+          - account-authentication
+          - transactional-notifications
+        restrictable: true
+        source: auth-default
+    slug: users

compliance/retention-policy.yml

@@ -0,0 +1,32 @@
+# compliance/retention-policy.yml — Collection retention schedules
+# Generated by scripts/compliance/emit-retention-policy.mjs — do not edit manually.
+# Run `pnpm compliance:retention-policy` to regenerate.
+collections:
+  articles:
+    postDeletion:
+      action: hard-delete
+      duration: P90D
+      trigger: after-deletion
+    purgeSchedule: monthly
+    slug: articles
+  media:
+    postDeletion:
+      action: hard-delete
+      duration: P90D
+      trigger: after-deletion
+    purgeSchedule: monthly
+    slug: media
+  pages:
+    postDeletion:
+      action: hard-delete
+      duration: P90D
+      trigger: after-deletion
+    purgeSchedule: monthly
+    slug: pages
+  users:
+    postDeletion:
+      action: hard-delete
+      duration: P30D
+      trigger: after-deletion
+    purgeSchedule: daily
+    slug: users

compliance/sub-processors.yml

@@ -0,0 +1,5 @@
+# compliance/sub-processors.yml — Third-party sub-processor inventory
+# Generated by scripts/compliance/emit-sub-processors.mjs — do not edit manually.
+# Run `pnpm compliance:sub-processors` to regenerate.
+sub-processors:
+  []