Purpose and scope
This policy defines the core practices applied to collecting, transforming, analysing, and reporting data in internal work and customer projects. Project-specific contracts and data responsibilities apply in addition to this general framework.
Data responsibility
Only data necessary for a defined business or service purpose is used. The data source, purpose of use, responsible person or team, retention period, and access permissions are recorded according to the nature of the dataset.
Metric and report definitions
Each core metric has a stated definition, data source, calculation method, and update frequency. A common definition is used to prevent metrics with the same name but different calculations from being confused in decision-making.
- Metrics whose source has changed or is no longer reliable are marked accordingly.
- Targets and actual values are compared over the same period and scope.
- Reports that are unused or misleading are reviewed.
Data quality
Checks for accuracy, completeness, timeliness, and consistency are determined by the purpose for which the data will be used. Errors or omissions in a source system are not concealed; users are informed if they affect interpretation of the report.
Analysis and reporting
The analysis method is selected according to the question to be answered and the quality of the available data. Assumptions, limitations, and the conditions under which the result is valid are stated in the report.
- Forecasts are clearly distinguished from actual results.
- Calculations used for critical decisions are recorded in a reproducible form.
- The report’s level of detail and access permissions are determined according to its intended users.
Access, security, and retention
Access is limited according to role requirements. Controls for transfer, storage, backup, and deletion are applied according to the sensitivity of the data, contractual requirements, and applicable law.
Exporting or sharing reports that contain personal or confidential data requires separate authorisation.
Review
This policy is reviewed when there is a material change to the relevant service, process, organisational structure, or applicable law. After any necessary revisions, the current text and revision date are published on this page.