What does this hold about me?
You will find the answer in the application: Governance Mining → My data. The page reads the real data — it is not a description of what could theoretically be there, it shows your numbers.
It answers the question in three parts, because these are three different kinds of data.
1. In metrics: nothing attributable to you
Section titled “1. In metrics: nothing attributable to you”Governance Mining’s analyses concern roles, value streams and relationships. A finding such as “this value stream has no owner” names the value stream, not you. There is no row in these metrics that is about you.
2. In approval data: your own drafts and decisions
Section titled “2. In approval data: your own drafts and decisions”The approval process must know who submitted a change and who decided it — otherwise no change would be traceable. The page shows you three numbers:
- Drafts you submitted — tied to your user account.
- Decisions you made — tied to your person, and requires your account to be linked to a person.
- Changes attributed to you — the changes that landed with your person as submitter.
What does not follow from this: no cycle time for “person X”, no approver ranking, no assessment of your performance. These numbers serve the traceability of decisions — not your appraisal.
If your account is linked to no person, the page says so. Decisions and attributed changes then cannot be associated with you — not even by the platform itself.
3. In person-level analyses: as a rule, nothing at all
Section titled “3. In person-level analyses: as a rule, nothing at all”Analysis involving personal data is a separately purchased feature. If it is not purchased for your tenant, the page states explicitly: there is no such analysis in which you could appear. If it is purchased, you see here in full what it holds about you.
What you can do yourself
Section titled “What you can do yourself”- The processing description under Scope of analysis shows you what runs in your tenant at all, with which thresholds and retention periods — and what explicitly is not analysed.
- A request for access, rectification or erasure under Art. 15 ff. GDPR goes to your employer: they are the controller, roleALPHA is the processor. This page gives you the basis to phrase that request concretely.
Related: Governance Mining · Governance Mining — what is analysed and what is not