All Our Security — Data Classification Policy Generator

1Organization

2Data Types

3Handling

4Generate

Organization Details

Tell us about your organization to tailor the Data Classification Policy.

Company Name

Company name is required

Industry

Please select an industry

Framework Alignment

Select compliance frameworks this policy should align with.

NIST CSF NIST 800-53 ISO 27001 SOC 2 HIPAA PCI-DSS CMMC GDPR

Data Types & Classification

Define what data your organization handles and how it should be classified.

Data Types Handled

Select all types of sensitive data your organization processes.

PII (Personally Identifiable Info) PHI (Protected Health Info) PCI (Payment Card Data) Intellectual Property Financial Data Legal / Privileged HR / Employee Records CUI (Controlled Unclassified)

Select at least one data type

Classification Tiers

Choose a 3-tier or 4-tier classification model.

3-Tier (Public / Internal / Confidential) 4-Tier (Public / Internal / Confidential / Restricted)

Please select a classification model

Labeling Requirements

How should classified documents/data be labeled?

Please select a labeling approach

Data Retention Requirements

Describe retention periods or regulatory requirements for data retention.

Handling & Protection Requirements

Define how data at each classification level should be handled, stored, and transmitted.

Handling Detail Level

How detailed should the handling procedures be?

Standard — General guidelines per level Detailed — Specific procedures per data type & level

Please select a detail level

Storage Requirements

Describe approved storage locations and encryption requirements.

Transmission Requirements

Rules for transmitting classified data (email, file transfer, etc.).

Disposal & Destruction Requirements

How should data be destroyed when no longer needed?

Review & Generate

Review your information, then generate your Data Classification Policy.