Data Privacy
A data inventory is a structured list of what information your business collects, where it lives, who can access it, and how long you keep it. It sounds like an enterprise compliance exercise. It is not. It is a practical operations document that helps you answer basic questions before they become urgent ones.
What a data inventory actually is
Think of it as a catalog of your business data — not every file on every laptop, but the categories that matter: customer contact information, payment records, employee data, analytics logs, vendor contracts, and AI tool inputs.
You are not auditing for regulatory compliance. You are mapping what you have so you can make informed decisions about storage, access, and vendor relationships.
Four columns every inventory needs
Data type: what category of information (customer email, invoice PDF, support ticket). Where it lives: which system, folder, or vendor holds it. Who has access: roles or named individuals. Retention period: how long you keep it and when it gets deleted.
Four columns. One row per data type. That is the whole structure.
Running a discovery session with your team
Schedule 60 minutes with the people who touch data daily — operations, finance, client delivery, anyone who onboarded a new SaaS tool in the last year. Ask: what do we collect, where does it go, who else can see it?
Capture answers in a shared spreadsheet. Disagreement in the room is useful — it surfaces undocumented data flows.
Keeping it current
Add a row whenever you adopt a new tool or start collecting a new data type. Review quarterly. Assign one owner — not a committee. A data inventory that nobody maintains becomes misleading faster than having no inventory at all.
The Data Privacy Baseline workflow on TechEd Analyst walks through building an inventory as a working document.