govoplan/docs/evidence/snapshots/DSAR_PROVIDER_COVERAGE.generated.md

DSAR Provider Coverage

This generated matrix is enforced by tools/checks/check-dsar-coverage.py. A migration-owning module must register and document its canonical DSAR provider. Every other active module requires a reviewed explanation of why it owns no persistent subject-data store. Adding a migration invalidates that explanation.

• Active modules: 72
• Registered and documented DSAR providers: 48
• Reviewed no-store rationales: 24
• Unexplained coverage gaps: 0

Module	Repository	Persistence	Coverage	Rationale
access	govoplan-access	Migration-owned	Provider	Provider privacy.dsar.access is registered and documented.
addresses	govoplan-addresses	Migration-owned	Provider	Provider privacy.dsar.addresses is registered and documented.
admin	govoplan-admin	Migration-owned	Provider	Provider privacy.dsar.admin is registered and documented.
approvals	govoplan-approvals	Migration-owned	Provider	Provider privacy.dsar.approvals is registered and documented.
assets	govoplan-assets	No module migration	Reviewed no-store rationale	Contract-only module: asset persistence and lifecycle APIs are not implemented; reassess before adding a migration-owned store.
audit	govoplan-audit	Migration-owned	Provider	Provider privacy.dsar.audit is registered and documented.
booking	govoplan-booking	No module migration	Reviewed no-store rationale	Contract-only module: booking persistence and reservation workflows are not implemented; reassess before adding a migration-owned store.
calendar	govoplan-calendar	Migration-owned	Provider	Provider privacy.dsar.calendar is registered and documented.
campaigns	govoplan-campaign	Migration-owned	Provider	Provider privacy.dsar.campaigns is registered and documented.
cases	govoplan-cases	Migration-owned	Provider	Provider privacy.dsar.cases is registered and documented.
certificates	govoplan-certificates	No module migration	Reviewed no-store rationale	Contract-only module: certificate issuance and revocation persistence are not implemented; reassess before adding a migration-owned store.
committee	govoplan-committee	Migration-owned	Provider	Provider privacy.dsar.committee is registered and documented.
connectors	govoplan-connectors	Migration-owned	Provider	Provider privacy.dsar.connectors is registered and documented.
consultation	govoplan-consultation	No module migration	Reviewed no-store rationale	Contract-only module: consultation submissions and evaluation persistence are not implemented; reassess before adding a migration-owned store.
contracts	govoplan-contracts	No module migration	Reviewed no-store rationale	Contract-only module: contract, amendment, and obligation persistence are not implemented; reassess before adding a migration-owned store.
dashboard	govoplan-dashboard	Migration-owned	Provider	Provider privacy.dsar.dashboard is registered and documented.
dataflow	govoplan-dataflow	Migration-owned	Provider	Provider privacy.dsar.dataflow is registered and documented.
datasources	govoplan-datasources	Migration-owned	Provider	Provider privacy.dsar.datasources is registered and documented.
decisions	govoplan-decisions	Migration-owned	Provider	Provider privacy.dsar.decisions is registered and documented.
dist_lists	govoplan-dist-lists	Migration-owned	Provider	Provider privacy.dsar.dist_lists is registered and documented.
dms	govoplan-dms	No module migration	Reviewed no-store rationale	Stateless integration-preview module: DMS retains no document, person, credential, or provider-response store; Files and Records remain the subject-data owners. Reassess before persisting a target binding, plan, receipt, or diagnostic.
docs	govoplan-docs	Migration-owned	Provider	Provider privacy.dsar.docs is registered and documented.
encryption	govoplan-encryption	Migration-owned	Provider	Provider privacy.dsar.encryption is registered and documented.
erp	govoplan-erp	No module migration	Reviewed no-store rationale	Stateless integration-contract module: ERP retains no invoice, payable, plan, booking observation, provider response, or credential store; Procurement, Payments, Ledger, Files, and Audit remain the subject-data owners. Reassess before persisting a target binding, plan, receipt, reconciliation decision, or diagnostic.
evaluation	govoplan-evaluation	No module migration	Reviewed no-store rationale	Contract-only module: evaluation runs, responses, and scores are not persisted; reassess before adding a migration-owned store.
facilities	govoplan-facilities	No module migration	Reviewed no-store rationale	Contract-only module: facility and maintenance persistence are not implemented; reassess before adding a migration-owned store.
files	govoplan-files	Migration-owned	Provider	Provider privacy.dsar.files is registered and documented.
fit_connect	govoplan-fit-connect	No module migration	Reviewed no-store rationale	Stateless transport-contract module: FIT-Connect retains no submission, attachment, receipt, acknowledgement plan, key, provider response, or diagnostic store; the owning Service, Forms, Cases, Files, and Audit workflows remain responsible for subject data. Reassess before persisting any ingress or event-log evidence.
forms	govoplan-forms	Migration-owned	Provider	Provider privacy.dsar.forms is registered and documented.
forms_runtime	govoplan-forms-runtime	Migration-owned	Provider	Provider privacy.dsar.forms_runtime is registered and documented.
grants	govoplan-grants	No module migration	Reviewed no-store rationale	Contract-only module: grant applications, awards, and monitoring are not persisted; reassess before adding a migration-owned store.
helpdesk	govoplan-helpdesk	Migration-owned	Provider	Provider privacy.dsar.helpdesk is registered and documented.
identity	govoplan-identity	Migration-owned	Provider	Provider privacy.dsar.identity is registered and documented.
identity_trust	govoplan-identity-trust	Migration-owned	Provider	Provider privacy.dsar.identity_trust is registered and documented.
idm	govoplan-idm	Migration-owned	Provider	Provider privacy.dsar.idm is registered and documented.
inspections	govoplan-inspections	No module migration	Reviewed no-store rationale	Contract-only module: inspections, findings, and measures are not persisted; reassess before adding a migration-owned store.
learning	govoplan-learning	No module migration	Reviewed no-store rationale	Contract-only module: learning offers, enrollment, and completion are not persisted; reassess before adding a migration-owned store.
mail	govoplan-mail	Migration-owned	Provider	Provider privacy.dsar.mail is registered and documented.
mandates	govoplan-mandates	Migration-owned	Provider	Provider privacy.dsar.mandates is registered and documented.
notifications	govoplan-notifications	Migration-owned	Provider	Provider privacy.dsar.notifications is registered and documented.
ops	govoplan-ops	No module migration	Reviewed no-store rationale	Projection-only module: Ops reads bounded platform and provider status; durable recovery evidence remains owned by Core and domain modules.
organizations	govoplan-organizations	Migration-owned	Provider	Provider privacy.dsar.organizations is registered and documented.
parties	govoplan-parties	Migration-owned	Provider	Provider privacy.dsar.parties is registered and documented.
payments	govoplan-payments	Migration-owned	Provider	Provider privacy.dsar.payments is registered and documented.
permits	govoplan-permits	No module migration	Reviewed no-store rationale	Contract-only module: permit applications, assessments, and decisions are not persisted; reassess before adding a migration-owned store.
policy	govoplan-policy	Migration-owned	Provider	Provider privacy.dsar.policy is registered and documented.
poll	govoplan-poll	Migration-owned	Provider	Provider privacy.dsar.poll is registered and documented.
portal	govoplan-portal	No module migration	Reviewed no-store rationale	Projection-only module: Portal stores no applicant records; Services, Forms Runtime, Cases, and Postbox own and export authoritative subject data.
postbox	govoplan-postbox	Migration-owned	Provider	Provider privacy.dsar.postbox is registered and documented.
procurement	govoplan-procurement	No module migration	Reviewed no-store rationale	Contract-only module: procurement procedures, tenders, and awards are not persisted; reassess before adding a migration-owned store.
projects	govoplan-projects	Migration-owned	Provider	Provider privacy.dsar.projects is registered and documented.
quick_access	govoplan-quick-access	Migration-owned	Provider	Provider privacy.dsar.quick_access is registered and documented.
records	govoplan-records	Migration-owned	Provider	Provider privacy.dsar.records is registered and documented.
reporting	govoplan-reporting	Migration-owned	Provider	Provider privacy.dsar.reporting is registered and documented.
resources	govoplan-resources	No module migration	Reviewed no-store rationale	Contract-only module: resource catalog and allocation persistence are not implemented; reassess before adding a migration-owned store.
rest	govoplan-rest	No module migration	Reviewed no-store rationale	Transport-only module: REST binds explicitly published functions and owns no domain or subject-data store.
risk_compliance	govoplan-risk-compliance	Migration-owned	Provider	Provider privacy.dsar.risk_compliance is registered and documented.
scheduling	govoplan-scheduling	Migration-owned	Provider	Provider privacy.dsar.scheduling is registered and documented.
search	govoplan-search	Migration-owned	Provider	Provider privacy.dsar.search is registered and documented.
services	govoplan-services	Migration-owned	Provider	Provider privacy.dsar.services is registered and documented.
soap	govoplan-soap	No module migration	Reviewed no-store rationale	Transport-only module: SOAP binds explicitly published operations and owns no domain or subject-data store.
tasks	govoplan-tasks	Migration-owned	Provider	Provider privacy.dsar.tasks is registered and documented.
templates	govoplan-templates	Migration-owned	Provider	Provider privacy.dsar.templates is registered and documented.
tenancy	govoplan-tenancy	No module migration	Reviewed no-store rationale	Orchestration module: tenant lifecycle and settings use Core-owned storage; Access covers account and membership subject data.
tickets	govoplan-tickets	Migration-owned	Provider	Provider privacy.dsar.tickets is registered and documented.
transparency	govoplan-transparency	No module migration	Reviewed no-store rationale	Contract-only module: requests, disclosure reviews, and publications are not persisted; reassess before adding a migration-owned store.
views	govoplan-views	Migration-owned	Provider	Provider privacy.dsar.views is registered and documented.
voting	govoplan-voting	Migration-owned	Provider	Provider privacy.dsar.voting is registered and documented.
wiki	govoplan-wiki	Migration-owned	Provider	Provider privacy.dsar.wiki is registered and documented.
workflow	govoplan-workflow	No module migration	Reviewed no-store rationale	Presentation-only module: Workflow edits and projects Workflow Engine state; Workflow Engine owns persistence and DSAR coverage.
workflow_engine	govoplan-workflow-engine	Migration-owned	Provider	Provider privacy.dsar.workflow_engine is registered and documented.
xrechnung	govoplan-xrechnung	No module migration	Reviewed no-store rationale	Stateless validation-contract module: XRechnung persists no invoice, report, diagnostic, or handoff; the invoking Files, Procurement, or Payments workflow remains the subject-data owner. Reassess before adding a validation store.

Provider search, export minimization, retention, and erasure behavior remains documented and tested by each owning module. This matrix verifies adoption and ownership coverage; Core continues to test disabled providers, partial failure, retry, authorization evidence, and horizontally coordinated execution.