Skip to content
papii

Document template · generic.it.data_classification

Data Classification Policy

  • Render-verified
  • Informational
  • Version 1.0.0

Policy defining the organisation's classification levels plus a register mapping each data type to its level, owner and handling rules. Supports ISO/IEC 27001 A.5.12 and the GDPR data-minimisation principle.

JSON Schema

Fields in this template

Data sent to the API is validated against the template’s JSON Schema before anything is rendered. This template defines 23 fields:

Field Required Type Description
entity Required string
version Required string
effective_date Required date
next_review Optional date
classification_levels Required array of object
classification_levels[].level_name Required string
classification_levels[].description Required string
classification_levels[].example_data_types Required array of string
classification_levels[].handling_rules Required string
classification_levels[].retention_default Required string
classification_levels[].allowed_storage Required string
classification_levels[].allowed_transmission Required string
data_registry Required array of object
data_registry[].data_type Required string
data_registry[].classification_level Required string
data_registry[].business_owner Required string
data_registry[].systems Required array of string
data_registry[].retention Required string
data_registry[].special_controls Optional string
review_cycle Required string
policy_owner Required object
policy_owner.name Required string
policy_owner.title Required string

POST /render

Generate it

One POST /render call: send your JSON, get the finished PDF back. Or skip the JSON entirely and describe the document in plain language on chut.app.

curl 
curl -X POST https://api.papii.eu/render \
  -H "X-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "template": "generic.it.data_classification",
    "data": { ... },
    "options": {"language": "en"}
  }' -o data-classification.pdf
Generate with AI on chut.app Try in the dashboard

Frequently asked questions

What is “Data Classification Policy”?

Policy defining the organisation's classification levels plus a register mapping each data type to its level, owner and handling rules. Supports ISO/IEC 27001 A.5.12 and the GDPR data-minimisation principle. On papii this document is available as template generic.it.data_classification: a JSON Schema plus a deterministic PDF renderer, so the same data always produces the same document.

Can I generate a Data Classification Policy with AI?

Yes. chut.app — the AI back office papii powers — fills this template from a plain-language description: you describe the document in one sentence, the AI structures the data, papii validates it against the schema and renders the PDF. Developers can also call the papii API directly with structured JSON.

Is the Data Classification Policy template legally compliant?

This template is render-verified: its schema, sample data and PDF output are automatically tested on every release. It is published with status “ready”, meaning it has not yet been through papii’s final legal review. Where it references specific legislation, that is stated in the template description — always have a professional check documents with legal effect before relying on them.