GBOS

REVIEW-READY DRAFT — GBOS-specific and factual, but NOT final and NOT legal advice. Must be confirmed by a qualified solicitor before GBOS relies on it (see the [SOLICITOR TO CONFIRM] items).

GBOS Network Data-Sharing Schedule

Version 2026-08-r1 · Effective 2026-08-02

Terms for controlled business-to-business sharing over the GBOS Network.

1. How sharing works (implemented control)

The Network exchanges data by governed COPY, not by cross-tenant table access: the sender captures a snapshot of the object (with a content hash for provenance) and the recipient materialises it as its own tenant-isolated data. The recipient never reads the sender’s source tables (those remain fail-closed under the sender’s row-level security).

A share requires an accepted connection (mutual consent) and the sender’s Network participation to be enabled; a consequential share is held in the sender’s approval inbox until authorised. Consent and revocation are enforced at the database layer.

2. Revocation — honest limits

Revocation tombstones the recipient’s copy so the governed resolver stops serving it going forward. It cannot retrieve information a recipient has already viewed, exported or acted upon. [SOLICITOR TO CONFIRM] how to state this limit to customers and the contractual restrictions on recipient reuse.

3. Roles and responsibilities

The sending and receiving businesses are responsible for their lawful basis to share and receive data respectively. [SOLICITOR TO CONFIRM] the controller/processor framework and confidentiality/IP/onward-disclosure terms between the businesses and GBOS’s role.

Clauses a solicitor must confirm

The following points in this document require qualified legal sign-off before GBOS relies on it.

  • The controller/processor analysis when data is shared between two customer businesses (independent controllers vs other).
  • What revocation can realistically achieve once a recipient holds a copy, and how to word it accurately to customers.
  • Confidentiality, IP, accuracy/reliance and onward-disclosure allocation between sender and recipient.
  • When GBOS ceases to be a neutral platform for shared content.

This document is a GBOS-specific, review-ready draft. It is not final and does not constitute legal advice; it must be confirmed by a qualified solicitor (see the clauses flagged above) before GBOS relies on it.