# Data Classification Matrix

> Auto-generated by Prism from the project specification.
> Organization: **{{ organization_name }}**
> Generated: {{ generated_at }}

## Classification Levels

| Level | Description | Handling Requirements |
|-------|-------------|----------------------|
| Public | Non-sensitive, publicly available | No special handling |
| Internal | Internal use, not personal data | Access controls |
| Confidential | Contains PII / personal data | Encryption, audit logging, access controls |
| Highly Confidential | Sensitive PII (health, biometric, financial) | Encryption at rest, field-level audit, strict access |

## Field Classification by Model

{% for model in all_models %}
### {{ model.name }}
{% if model.is_personal_data %}
**⚠ Contains personal data** — Legal basis: {{ model.legal_basis | replace('_', ' ') | title }}
{% endif %}

| Field | Type | Classification | PII | Audit Access | Encrypted | Redacted |
|-------|------|---------------|-----|-------------|-----------|----------|
{% for field in model.all_fields %}
| {{ field.name }} | {{ field.type }} | {{ field.classification }} | {{ "✓" if field.is_pii else "" }} | {{ "✓" if field.audit_access else "" }} | {{ "✓" if field.encrypt_at_rest else "" }} | {{ "✓" if field.redact_in_logs else "" }} |
{% endfor %}

{% endfor %}

## Summary Statistics

| Metric | Count |
|--------|-------|
| Total models | {{ all_models | length }} |
| Models with personal data | {{ personal_data_models | length }} |
| Total PII fields | {{ total_pii_fields }} |
| Encrypted fields | {{ total_encrypted_fields }} |
| Fields with audit access | {{ total_audited_fields }} |

---

*This document is auto-generated from the Prism specification.*
