Purpose limitation
Data requirements are defined against the intended monitoring, modelling, simulation and reporting outcomes. Unnecessary data should not be collected simply because it is available.
Data protection by design.
ENERGE TWIN treats operational evidence, personal information and model outputs according to their purpose, sensitivity and agreed governance requirements.
Controlled access
- Role-based access aligned with responsibilities
- Approved interfaces for connected systems
- Accountable ownership of operational decisions
- Review of access when roles or engagements change
Retention and deletion
Retention periods should reflect operational, contractual and legal requirements. Data is removed or anonymised when it is no longer required, subject to agreed records and continuity obligations.
Customer context
Deployment controls are confirmed for each engagement because data residency, estate systems and organisational requirements can differ by customer and jurisdiction.