| Review charter | Use case, affected parties, risk questions, groups, scope, exclusions, methods, and decision rights | Document and workshop record | Discovery | Business context, risk appetite, legal and domain input | Joint |
| Dataset inventory and provenance map | Sources, versions, owners, collection, transformations, licensing, lineage, retention, and updates | Register and diagram | Current-state review | Metadata, schemas, contracts, pipeline information | Dataconsultant with client validation |
| Representation and coverage analysis | Subgroup, scenario, language, geography, time, missingness, and sampling findings | Analysis pack and visualisations | Assessment | Lawful attributes, reference populations, domain interpretation | Dataconsultant |
| Label and annotation assessment | Definitions, balance, agreement, disagreement, guidance, adjudication, and quality risks | Findings report and sample analysis | Assessment | Guidelines, labelled samples, adjudication records | Dataconsultant |
| Proxy and historical-pattern register | Potential indirect attributes, rationale, evidence, uncertainty, and response options | Risk register | Assessment | Feature purpose, legal and domain review | Joint decision |
| Risk-ranked findings report | Evidence, impact, severity, confidence, dependencies, limitations, and recommended action | Executive and technical report | Findings | Stakeholder review and risk acceptance | Dataconsultant |
| Remediation backlog | Collection, sampling, re-labelling, documentation, controls, testing, ownership, and acceptance criteria | Prioritised backlog | Remediation planning | Capacity, product priorities, platform constraints | Joint |
| Assurance and handover pack | Review evidence, methods, decision log, open issues, monitoring measures, templates, and training | Evidence pack and workshop | Closeout | Named owners and operating process | Joint |