Understand classification schemes and levels, see what a level hides from people who are not cleared, classify a product, and grant, revoke and check clearances.
Some products may be seen only by named people, for example a customer's confidential design or equipment made under a defence contract. Classification marks how sensitive a record is. A clearance says who may see records at that level.
Clearance is separate from permissions. Your roles decide what you may do in Products; your clearance decides which classified records you see at all. Both apply: someone holding every Products permission still sees nothing above their clearance.
Product location: /products. Open Products in the main menu.
A classification scheme is a ladder of levels, from least to most restricted. The product's profile names the scheme its products are classified under, so one organisation can run a commercial scheme for civil products and a national security scheme for defence products side by side.
Levels compare only within their scheme. A clearance in one scheme gives nothing in another. Holding NATO SECRET does not open a product classified Confidential under Commercial sensitivity.
The lowest level is the floor. Everyone is treated as holding the lowest level of every scheme. A record at the floor, or with no classification, is visible to everyone who can open Products.
Above the floor, clearance decides. A record above the floor is visible only to people cleared to that level or higher in the same scheme, and to Admins.
A part is never less restricted than its whole. A version can be classified higher than its product, never lower, and a test result never lower than its version.
Products, versions, test results, market placements and claims can each carry a level. You see a product's level in the register's Classification column and as a badge with a lock symbol in its header, and a version's level under Classification in This version on Overview.
A dossier or evidence pack carries the strictest marking among its contents, for example NATO RESTRICTED.
Product location: /products. Open Products in the main menu.
The ComplyTrain catalogue provides these schemes. Which one a product uses depends on its profile.
Scheme | Levels, from the floor upwards |
|---|---|
Commercial sensitivity | Public, Internal, Confidential, Restricted |
NATO | NATO UNCLASSIFIED, NATO RESTRICTED, NATO CONFIDENTIAL, NATO SECRET, COSMIC TOP SECRET |
European Union | Not EU classified, RESTREINT UE / EU RESTRICTED, CONFIDENTIEL UE / EU CONFIDENTIAL, SECRET UE / EU SECRET, TRÈS SECRET UE / EU TOP SECRET |
Denmark (national) | Ikke klassificeret, TIL TJENESTEBRUG, FORTROLIGT, HEMMELIGT, YDERST HEMMELIGT |
Ukraine (state secret) | The three degrees of secrecy in Ukrainian law, above a floor for information that is not a state secret |
National schemes | One ladder per country, for example Albania, Australia, Belgium and Canada, each with that country's own markings |
Under Commercial sensitivity, only Public is the floor. Internal is meant for ordinary business information that staff may see, yet a product classified Internal is hidden from every colleague you have not cleared to Internal or higher. Grant Internal to the staff who work with products before you classify anything Internal.
Product location: /products. Open Products in the main menu.
Where | What happens |
|---|---|
Product register | Products above your clearance are left out. The total and the pages count only what you can see. |
A link to a product you are not cleared for | Not cleared: "You do not have the clearance needed to open this product." with Back to register. The message does not say which level is needed. |
Versions | A version above your clearance is left out, even when you can open the product. |
Tabs of a product you can open | Test results, market placements and claims above your clearance are left out, and so are the export determinations and licences of versions and products you are not cleared for. |
Connected | Each module shows its items only to people who may see them in that module, and only for records you are cleared for. |
Dossiers and evidence packs | Records you are not cleared for are left out. This pack is not a complete account says how many, and the document says so on its cover. |
Obsolescence register | Only parts of products you can see. |
Found in your material | You may already have this lists only products you can see. |
The assistant | Reads and answers only from what you can see, and says when something was withheld. |
Tenders | The product search lists only products you can see. |
Reports | Product Portfolio and Product Expiry leave classified products out of their rows for everyone. |
Admins see every record, whatever its level, so nothing can become unreachable.
Product location: /products/{productId}/overview (fallback: /products). Open the product in Products, then the tab that holds the record.
You set a classification level on the form where you create or edit the record: the product itself, a version, a test result, a market placement or a claim. Each form offers the levels of the scheme the product's profile names, and no level above your own clearance in that scheme. Leave the level empty for a record anyone who can see the product may see.
Record | Where you set the level | Permission needed |
|---|---|---|
Product | When you edit the product's details | Manage Products |
Version | When you create or edit a version | Manage Products |
Test result | When you record or edit a result on Qualification | Manage Testing and Qualification |
Market placement | When you add or edit a market on Markets | Manage Markets and Authorizations |
Claim | When you add or edit a claim on Claims | Manage Product Claims |
Before you raise a record above the floor, make sure everyone who still needs it holds a clearance at that level.
Open the record's form and choose the classification level.
Save, and check the level: the lock badge in the product header, or Classification in This version on Overview.
A version cannot be classified below its product, and a test result cannot be classified below its version; saving such a level is refused. Raising a level hides the record from everyone below it at once. Lowering a level exposes what was restricted, so check the reason before you do it.
Product location: /products. Open Products in the main menu.
Only Admins grant clearances.
In Products, choose to grant a clearance.
Choose the person.
Choose the classification scheme, then the level. Only that scheme's levels are offered.
Set when the clearance starts and, if it should end, when it ends.
Enter the reference, for example the vetting record that supports it.
Save the clearance.
Field | What it does |
|---|---|
Person | The user who receives the clearance. |
Scheme | The classification scheme the clearance applies to. It gives nothing in any other scheme. |
Level | The highest level the person may see in that scheme. |
Valid from | The first day the clearance applies. Leave it empty to start today. |
Valid until | Optional. After this date the clearance lapses. Leave it empty for a clearance that lasts until it is revoked. |
Reference | What the clearance rests on, for example a vetting record or the contract that requires it. It is kept with the clearance. |
The clearance takes effect on its start date. The person still needs View Products to open Products at all.
A person can hold more than one grant in a scheme. Their effective clearance is the highest grant that is live, meaning started, not past its end date and not revoked. To raise someone's clearance, grant the higher level. To lower it, revoke the higher grant; their next-highest live grant then applies, or the floor if none is left.
Product location: /products. Open Products in the main menu.
Only Admins revoke clearances.
In Products, find the person's grant.
Choose to revoke it and enter the reason. The reason is required.
Confirm.
The grant stops counting at once. The person falls back to their highest remaining live grant in that scheme, or to the floor. Records above that level disappear from their register and pages, and a product page they had open shows Not cleared when they next load it. The revoked grant stays on record with who revoked it, when and why.
Product location: /products. Open Products in the main menu.
Everyone can see their own clearances in Products: each scheme, the level granted, when each grant starts and ends, and whether it has been revoked. If you meet Not cleared on a product you need, check your clearances and ask an Admin for the level the product requires.
Product location: /products. Open Products in the main menu.
Your organisation builds a sensor enclosure to a customer's design under a non-disclosure agreement. Its profile, "Customer designs", uses Commercial sensitivity. Only three engineers may see it until the project ends on 31 March 2027.
An Admin grants Internal clearance, with no end date, to everyone who works with products.
The Admin grants Restricted clearance to the three engineers and the product manager, valid until 31 March 2027, with the reference "NDA 2026-114, enclosure project". Their Internal grants stay in place underneath.
The product manager edits the product's details, chooses the level Restricted and saves. The lock badge in the header shows Restricted.
A colleague with Internal clearance searches the register: the product does not appear, and its link shows Not cleared.
On 1 April 2027 the Restricted grants lapse. The engineers fall back to Internal, and the product disappears from their register. If the work continues, an Admin grants Restricted again with a new end date.
