01
Programme Framework
Scope · ownership · 3 lines · governance
02
Retention Schedule
Live JS · per-category · regulator overlay · destroy date
03
Books-and-Records
BSA · SEC · FINRA · state · sector overlays
04
Electronic Comms
Email · IM · Slack · Teams · WhatsApp · SMS
05
Vendor Records
DD · contracts · sub-processors · termination evidence
06
Customer Records
Onboarding · KYC · CDD · transactions · disclosures
07
Audit Trails
Access logs · change logs · admin actions · retention
08
Legal Holds
Trigger · scope · custodian list · release · audit
09
E-Discovery
Producible inventory · search readiness · counsel-led
10
Deletion Workflow
Triggered · validated · backups + sub-processors covered
11
Storage Architecture
Tiering · WORM · encryption · cross-region · sovereignty
12
Programme Audit
Annual · sample · spot-check producibility
13
Committee Charter
CCO chair · counsel · CISO · CTO · cadence · authority