External data governance
Source Connectors
Every external source is represented as a governed connector with purpose, access method, data categories, residency, ToS/legal review, retention and operational health.
| Connector | Used by | Access method | Processing location | Data | Status |
|---|---|---|---|---|---|
| Business Registry / OSS/NIB | Registry Verification | Private API / approved integration | Indonesia | Company identity, NIB/KBLI, status | Connector-ready |
| Domain Intelligence / WHOIS | Website Intelligence | Licensed API | Configurable | Domain age/history/reputation | PoC validation |
| Google Business / Reviews | Google Review | Approved Google access method | Provider-dependent | Reviews, ratings, profile metadata | Policy review required |
| Licensed News Sources | Adverse Media | Licensed feeds / search APIs | Mixed | Articles, publisher metadata | Connector-ready |
| PEP / Sanctions Provider | Adverse Media | Licensed screening API | Configurable | PEP, sanctions, domestic lists if supported | Connector-ready |
| Social Platform APIs | Social Media | Official/permitted APIs | Provider-dependent | Business-profile signals | Per-platform approval |
| Private Vision Runtime | Image Safe Search | Private container / endpoint | Indonesia | Image classification only | Architecture-ready |
Connector policy gate
Contract / license validated
Permitted purpose documented
Data categories mapped to ROPA
Retention / deletion behavior known
Cross-border / subprocessor review passed
Evidence required before enablement
- Data-source owner and contractual basis.
- Endpoint / access mechanism and rate limits.
- Terms-of-service constraints and permitted retention.
- Data residency and subprocessors.
- Security controls and incident-notification SLA.
- Deletion / correction support.
- Availability and fallback behavior.
- Versioned connector configuration and audit log.
Connector observability
Google ReviewsDegraded · p95 1.8s
WHOIS / DomainHealthy · p95 0.6s
Media feedHealthy · last sync 3m
Platform MonitoringCredential state
SecretsVault-managed
Rotation2 due in 14d
mTLS certificatesValid
Quota & freshness
Review API quota72% remaining
Media source freshness3 min
Sanctions refresh21 min