---
id: compliance-manifests-pii-retention-subprocessors
prd: docs/work/prds/compliance-manifests-pii-retention-subprocessors.prd.md
title: Declarative compliance manifests (PII + retention + sub-processors) — Epic A of ADR-025
type: epic
status: in-progress
features:
  [core-shared, core-eslint, auth, blog, media, marketing-pages, navigation]
created: 2026-05-18T17:52:09Z
updated: 2026-05-18T19:21:32.358Z
---

## Goal

Ship the declarative compliance manifests + generators so downstream consumers get a complete, automatically-validated PII inventory, retention policy, and sub-processor record by editing source-of-truth Payload configs and ADR-022 library traces. Drift detection runs in pre-commit + CI; the consumer's `compliance/` directory becomes audit evidence.

## Stories

- [x] [01 — PII and retention type primitives in core-shared](01-pii-retention-type-primitives/_story.md)
- [x] [02 — ESLint rule pii-declaration-must-be-complete](02-eslint-rule-pii-declaration-complete/_story.md)
- [x] [03 — ADR-022 amendment and evaluate-library skill update](03-adr-022-amendment-and-evaluate-library-skill/_story.md)
- [x] [04 — Background retention purge job in core-shared](04-retention-purge-job/_story.md)
- [x] [05 — Backfill existing template collections](05-backfill-template-collections/_story.md)
- [ ] [06 — Compliance generator scripts](06-compliance-generator-scripts/_story.md)
- [ ] [07 — Pre-commit hook and CI integration](07-pre-commit-and-ci-integration/_story.md)
- [ ] [08 — docs/compliance reference files and README](08-docs-compliance-reference-files/_story.md)