Integrations Inventory and Attributes

The Data Sensitivities attribute on each integration record carries the sensitivity classifications of data transmitted through the integration. The Data Sensitivity Types Inventory (not yet published — refer to the IF4IT Enterprise Inventory Management Best Practices document) will govern the formal taxonomy of sensitivity classifications to which these values are mapped.

The relationship is consumption: the Integrations Inventory consumes Data Sensitivity Type definitions to formally classify its integration payloads by sensitivity. Until the Data Sensitivity Types Inventory is published, Data Sensitivities values are documented using the standard value set (PII, PHI, PCI, PFI, Confidential, Regulated, None). When published, Data Sensitivities will carry formal Data Sensitivity Type Semantic ID references through the Related Data Sensitivity Types relationship attribute.

When established, this relationship enables enterprise-level sensitivity governance at the integration level: for any given sensitivity classification, the complete set of integrations that transmit data of that type is immediately queryable. This enables targeted governance of high-sensitivity flows — ensuring encryption, access control, monitoring, and regulatory compliance are applied to every integration that warrants them, and only to those that do.