<!-- Data access request · from Chapter 19 of The Product 360 Handbook -->

# Data access request · [Product area] · [Date]

**Requester:** [name, role]   **Approvers:** [data owner] · [security or compliance reviewer]

## Purpose
The decision or recurring review this access supports, in one or two sentences:

## Harness and workspace
- Harness and plan (company-approved enterprise workspace only):
- Project or workspace where the data will be used:

## Sources and scopes
| Source | Connector or export | Read-only scope requested (named, no wildcards) | Write or send tools disabled? |
|---|---|---|---|
| | | | Yes |

## Fields and minimization
| Field | Data tier | Why it's needed | Aggregation level (account / segment / tier) | Masked or pseudonymized? |
|---|---|---|---|---|
| | | | | |

Fields explicitly excluded (personal data, free text, contract terms, credentials):

## Controls
- Audit logging confirmed: Yes / No
- Data residency requirement (for example EU data stays in EU region):
- Retention and deletion of any exports: [period, location, who deletes]
- Step-up rule: any write or broader scope needs a new request.

## Duration
Access starts [date] and expires [date]. Review on [date].

## Approval
| Approver | Decision | Conditions | Date |
|---|---|---|---|
| | | | |