Work-data privacy review worksheet

How to use this file

1. Record the actual version, purpose and features enabled.
2. Separate local analysis from synchronization, external AI and integrations.
3. Identify necessary information, recipients, access, retention and deletion using current documentation.
4. In an organization, involve responsible privacy functions and qualified advice where appropriate before deployment.

Open the file in an ordinary editor or spreadsheet. It is a manual resource, usable with or without FlowSight. It does not imply automatic agent import or integration.

A worked example

Fictional example: a local drafting trial is assessed separately from a later request to process a report with an external AI provider.

Template preview

# Work-data flow review

Review date: [date]
App version and operating system: [configuration]
Purpose: [specific use]
Features enabled: [local / connected capabilities]

## Information journey
- Input: [information observed or supplied]
- Processing: [device / named service]
- Storage: [location and verified retention]
- Output: [what leaves and why]
- Recipients: [authorized roles or services]
- Access control: [verified behavior]
- Deletion: [verified behavior and unanswered questions]

## Connected capabilities
- Feature: [name]
- Provider: [recipient]
- Data received: [scope]
- Terms and documentation: [source, date]

## Organizational review
- Responsible privacy function: [role]
- Questions requiring qualified advice: [questions]
- Participant information and required consultation: [process]
- Uses outside scope: [limits]

## Pilot decision
- Review date: [date]
- Feedback and actual decisions improved: [evidence]
- Retain / revise / stop: [decision and reasons]

Published by Manuel Castillejo / FlowSight, https://flowsight.site

Review before sharing

Check outcomes against evidence, preserve uncertainty and remove details the reader does not need. Review connected services separately if they process the document. The worksheet itself is a drafting aid, not a guarantee about privacy or compliance.

Read the supporting workflow · Check FlowSight documentation