Classification
Label files in your own words (Restricted, Contract, whatever your policy already says) and have the rest of the rules read those labels.
Governance
A rule nothing enforces is just a document.
Most organisations already have the policy written down somewhere. The gap is between the policy and the Tuesday afternoon when someone tries to delete a contract that is under dispute. Casewelt keeps the rules on the file itself, so they are there at the moment somebody acts.
CreatedContent enters a workspace
ClassifiedOrganisation labels it
ControlledPolicy evaluates actions
ObservedEvents stay searchable
RetainedKeep, hold or delete
Governance controls
Know what the content is, where it belongs, what may happen to it and how long it must remain.
Placement
Regional placement can be an organisation rule, with conflicting writes surfaced rather than silently rerouted.
Permitted actions
Authorisation separates identity from permission and can restrict sensitive operations such as external sharing.
Evidence
Every governance decision leaves a record you can search yourself, and forward to your own monitoring if you want it there too.
Retention & hold
Make preservation and deletion deliberate.
Retention is the organisation’s business rule for how long content must remain and when disposition may proceed, not a Casewelt undertaking to keep hosting that content after the subscription ends. While the organisation is an active customer, Casewelt enforces the rule it has defined. Hold adds another constraint: even if ordinary deletion would otherwise be permitted, the product should preserve the object while the authorised hold is active.
The useful behaviour is observable: a governed deletion succeeds when policy permits, fails when a hold blocks it, and leaves enough audit context to explain the outcome later.
See a worked governance examplePrivacy operations
Turn policy into visible product states.
Access, retention and regional handling can support a UK GDPR or GDPR programme, while responsibility for lawful processing remains with the organisation.
Restricted access
Authorisation and share expiry limit who can act, on which file and for how long.
Recorded retention
Keep, hold and delete are explicit states, so a later review can explain why content remained or deletion was refused.
Regional placement
A home-region rule turns geography into a testable decision; conflicting writes stop with a visible reason.
Your governance model
Map your rules to the content.
Bring the labels, retention periods, hold process and regional constraints your organisation already uses.