# Data Governance — [Your AI System Name]

> Auto-generated by AIR Blackbox. Fill in your system-specific details.
> This template covers EU AI Act Article 10 requirements.

## Data Sources
| Source | Type | Consent | Retention | Notes |
|--------|------|---------|-----------|-------|
| User prompts | Runtime input | [Y/N] | [Period] | Stored in AIR vault |
| LLM responses | Runtime output | N/A | [Period] | Stored in AIR vault |
| RAG knowledge base | Reference data | [Y/N] | [Period] | [Source] |

## PII Handling
- **Detection**: AIR Blackbox OTel pipeline scans all prompts for PII
- **Redaction**: [Enabled/Disabled] via prompt vault
- **Storage**: Prompts stored in controlled vault (S3/MinIO), not third-party cloud

## Data Quality Measures
- Prompt injection detection via AIR gateway
- Response validation: [Describe your approach]
- RAG retrieval quality monitoring: [Describe your approach]

## Consent
- [Describe how user consent is obtained for data processing]
