# RL Data Provenance A signed record for each hour of data: who recorded it, under what consent, where, and which steps processed it. Buyers pay a premium for it. ## The record - **Recorder** and worker consent, with IP assignment - **Premises release** for the location - **Biometric consent**: hand tracking counts as biometric - **Withdrawal position**: what happens when consent is revoked - **Processing chain**: each derivative names the job and version that made it ## Rules - Raw zone is immutable and canonical. - Anonymise before export, on trusted hardware. See [[Data Anonymization]]. - Raw data stays in-region. Only scrubbed derivatives cross borders. - Let buyers audit a sample on-platform before they license it. > [!note] Weak link seen in vfrog's design > Face-containing raw video runs on rented marketplace GPUs. An in-region processor removes this risk. ## Jurisdictions to check - Qatar - Kenya (ODPC, Data Protection Act) - EU / UK, per dataset ---- tags: #boat #deeptech links: [[RL Environment Stack]] [[Data Embassies]] [[Navon Sovereign Vaults]] [[Compute to data]]