Synthetic test document — not a real policy.

Data Handling and Retention Policy

This illustrative policy describes how the fictional Meridian Public Sector Advisory would classify and retain records if it existed.

Data classification

Records are illustratively classified as Public, Internal, Confidential, and Restricted. Restricted records would, in this fictional scenario, be encrypted at rest and in transit and access-logged.

Retention

Illustrative retention windows: operational logs 30 days, engagement records seven years, and anonymized analytics indefinitely. These values are examples only.

Access controls

The fictional policy references least-privilege access, periodic access reviews, and separation of duties. No real controls are implied.