CTL-021 · Data protection
The tenant boundary is enforced at the query layer
A caller in one tenant cannot read, export or reference a record belonging to another.
What counts as evidence for this control
Written before the test, so a tester cannot choose the evidence that suits the result
Cross-tenant probe results showing the refusal and its reason.
Test history
3 tests on record
| Test | Period | Sample method | Size | Pass | Fail | Result | Tester | Tested |
|---|---|---|---|---|---|---|---|---|
| CT-021-01 | Q3 month 2 2026 | full population | 1680 | 1680 | 0 | Pass | R. Whitfield Internal Audit | Aug 17, 2026 |
| CT-021-02 | Q3 month 1 2026 | full population | 1400 | 1400 | 0 | Pass | S. Nakamura Internal Audit | Jul 18, 2026 |
| CT-021-03 | Q2 2026 | full population | 600 | 600 | 0 | Pass | D. Okoye Internal Audit | Jun 18, 2026 |
CT-021-01 · findings
Q3 month 2 2026 · full population
No exceptions in the sample. Evidence attached for every item tested.
CT-021-02 · findings
Q3 month 1 2026 · full population
No exceptions in the sample. Evidence attached for every item tested.
CT-021-03 · findings
Q2 2026 · full population
No exceptions in the sample. Evidence attached for every item tested.
Exceptions raised against this control
None raised
What this page is, and what it is not
Read this before quoting a result
The test results on this page are a modeled test history for a modeled estate. They demonstrate the shape of independent control testing — a named tester outside the operating team, a stated sample method, a sample size, a pass and fail count, and evidence citations that resolve into the chain — not the audited results of a live enterprise.
12 of 12 evidence citations on this control resolve to a record in the evidence spine. Every citation resolves; each one links through to the sealed record it refers to.
A control shown as untested has no result at all. Coverage on this platform counts controls that were actually tested; it never counts a control as passing because it was designed.