DNISE is BEL’s governing information-boundary control. For each approved mission, it restricts what information may enter BEL’s authorized workflows, what BEL may retain for the approved purpose and retention period, and what may be disclosed through outputs, interfaces, exports, or supporting services.
Only expressly authorized, minimum-necessary signals, aggregates, governed references, appropriately governed opaque tokens, and permitted governance metadata may cross the authorized integration boundary.
BEL may retain authorized readiness outputs, configuration, provenance, assurance, audit, and outcome records needed for accountable institutional operations.
Aggregated and tokenized information remain subject to appropriate access, purpose, and re-identification-risk safeguards.