Files
veripath/docs/templates/data-inventory-template.md
T

2.2 KiB
Raw Blame History

Data Inventory [Client Name]

Status: Draft / Human Review / Locked
Last Updated: YYYY-MM-DD
Reviewed by:

Purpose

Establish ground truth of the client's digital presence. No analysis or diagnosis — only what exists, where it lives, and verification status.

Nothing in this document describes threats, severity, or required actions.

Data Sources

Google Business Profile

  • Access Status: Owner access / Pending / Denied
  • Data Range Available: e.g. 2025-07 to 2026-07 / Partial (Jan 2026 only) / None
  • Snapshot Date: YYYY-MM-DD
  • Verification Tier: Tier 1 / Tier 2
  • Notes / Gaps:
  • Snapshot Location: data/clients/[client]/raw/gmb/

Website

  • Access Status: Public / Login required
  • Data Range Available: N/A
  • Snapshot Date: YYYY-MM-DD
  • Verification Tier: Tier 1 / Tier 2
  • Notes / Gaps:
  • Snapshot Location: data/clients/[client]/raw/website/

Primary Social (Instagram / Facebook / other)

  • Access Status: Owner access / Pending / Denied
  • Data Range Available:
  • Snapshot Date: YYYY-MM-DD
  • Verification Tier: Tier 1 / Tier 2
  • Notes / Gaps:
  • Snapshot Location: data/clients/[client]/raw/social/

Booking / Scheduling System

  • Access Status: Access granted / Pending / Denied
  • Data Range Available:
  • Snapshot Date: YYYY-MM-DD
  • Verification Tier: Tier 1 / Tier 2
  • Notes / Gaps:
  • Snapshot Location: data/clients/[client]/raw/booking/

Other (specify)

  • Access Status:
  • Data Range Available:
  • Snapshot Date: YYYY-MM-DD
  • Verification Tier:
  • Notes / Gaps:
  • Snapshot Location:

Summary of Gaps / Blockers

Human Review Gate

  • All accessible sources have been ingested or snapshot taken
  • Every source has a Verification Tier tag (Tier 1 or Tier 2)
  • Snapshot date is recorded for every source
  • Data gaps and missing history are documented in Notes/Gaps
  • Inventory is accurate to the best of our current knowledge

Once this gate is signed off, the inventory is Locked and Layer 2 (Threat Diagnosis) may begin.

The agent must never treat a source with a missing or outdated snapshot date as current data.

Reviewer sign-off: _________________ Date: _________