Security
Built around controlled access, explicit scope, and traceable provenance.
Control should survive the transaction. Monument Exchange tracks source scope, processing, permissions, provenance, and licensee access through the life of a data asset.
Data path
Five zones. Data crosses a gate only when every condition is met.
Select a gate to see what it requires.
Source
Your systems. You choose the sources, date ranges, and fields in scope.
Restricted ingestion
Raw records land in quarantine. No default model access, no public URLs, no copies on laptops.
Processing
Rights classification, PII and secret scanning, de-identification, and normalization.
Sanitized asset
Profiled, quality-tested dataset with a provenance record. Still not visible to licensees.
Licensed release
Only the licensed slice, under signed terms, with a logged delivery and retention timer.
Controls
Every control shows its real status.
A control is marked live only once it is running. Until then it reads "In design", including encryption details and certifications.
What Monument Exchange will not accept
- Data the owner has no authority to license
- Stolen data or data obtained unlawfully
- Scraped personal data
- Leaked credentials
- Confidential third-party data outside permitted scope
- Datasets where rights cannot be established
- Prohibited highly sensitive categories under Monument Exchange policy
What every data owner gets in writing
- Which sources are requested and which fields are excluded
- What rights you grant, and what the licensee and Monument Exchange may do
- Whether the license is exclusive
- How long raw data is kept and when access is revoked
- How payment and future re-licensing work
- What happens on deletion