Heratio Help Center article. Category: Compliance.

Security Classification

User Guide

Manage access to sensitive records using security clearance levels and classification markings.


Overview

SECURITYCLASSIFICATIONRECORDCLASSIFICATIONUSERCLEARANCETOPSECRETTOPSECRETCanseeallSECRETSECRETCONFIDENTIALCONFIDENTIALRESTRICTEDRESTRICTEDPUBLICPUBLICEveryoneUserscanonlyseerecordsatorbelowtheirlevel

Classification Levels

LEVELDESCRIPTION🔴TOPSECRETHighestsensitivitySeveredamageifdisclosed🟠SECRETHighsensitivitySeriousdamageifdisclosed🟡CONFIDENTIALMediumsensitivityDamageifdisclosed🔵RESTRICTEDLimiteddistributionInternaluseonly🟢PUBLICNorestrictionsAnyonecanview

How It Works

ACCESSDECISIONUserwithSECRETclearancetriestoviewarecord:RecordisPUBLIC✅ACCESSGRANTEDRecordisRESTRICTED✅ACCESSGRANTEDRecordisCONFIDENTIAL✅ACCESSGRANTEDRecordisSECRET✅ACCESSGRANTEDRecordisTOPSECRET❌ACCESSDENIED

Viewing Your Clearance Level

Check Your Profile

  1. Click your username in the top right
  2. Select Profile
  3. Your clearance level is displayed
MYPROFILEName:JaneSmithEmail:j.smith@archive.orgRole:EditorSecurityClearance:🟠SECRETYoucanviewrecordsclassifieduptoSECRET

Classifying Records

For Editors and Above

When creating or editing a record:

EDITRECORDTitle:[BoardMeetingMinutes2025]Reference:[ADM/BOARD/2025/001]...otherfields...SECURITYCLASSIFICATIONClassification:[CONFIDENTIAL]•PUBLIC•RESTRICTED•CONFIDENTIAL•SECRET•TOPSECRETReason:[Containsstaffsalaryinformation]ReviewDate:[2030-01-01]

Classification Guidelines

WHATTOCLASSIFYATEACHLEVEL🔴TOPSECRET•Nationalsecuritydocuments•Legalproceedings(active)•Highlysensitivepersonaldata🟠SECRET•Personnelfiles•Financialrecords•Investigationfiles🟡CONFIDENTIAL•Internalcorrespondence•Meetingminutes(sensitive)•Draftdocuments🔵RESTRICTED•Internaladministrativerecords•Unpublishedresearch•Workinprogress🟢PUBLIC•Publishedmaterials•Historicalrecords(declassified)•Generalreferencematerials

What You See When Access is Denied

If you try to view a record above your clearance:

🔒ACCESSRESTRICTEDThisrecordrequiresahighersecurityclearance.RecordClassification:SECRETYourClearance:RESTRICTEDIfyouneedaccesstothisrecord,pleasecontactyoursupervisorortherecordsadministrator.[RequestAccess]

Searching Classified Records

When you search, you only see records you have clearance for:

SEARCHRESULTSSearch:"budget2025"Showing15of15resultsyoucanaccess(3additionalresultsrequirehigherclearance)1.BudgetReport2025-Draft🟢PUBLIC2.DepartmentalBudgetRequests🔵RESTRICTED3.BudgetCommitteeMinutes🟡CONFIDENTIAL...

Classification Markings on Records

Classified records show their level clearly:

🟠SECRET[Edit]Title:PersonnelInvestigationFileReference:HR/INV/2025/003Date:15January2025CLASSIFICATIONDETAILSLevel:SECRETClassifiedby:AdminUserDate:01January2025ReviewDate:01January2035Reason:Containspersonalemploymentinformation

Declassification

Records may be reviewed and declassified over time:

DECLASSIFICATIONWORKFLOWReviewDateReachedReviewRecordStillCanbeSensitiveDeclassifiedExtendLowertheReviewClassificationDateLevel

Audit Trail

All classification changes are logged:

CLASSIFICATIONHISTORYDateUserAction10Jan2026J.SmithDowngradedtoRESTRICTED01Jan2025A.BrownSettoCONFIDENTIAL15Dec2024M.JonesCreatedasSECRET

Automated Security Tasks

The system automatically performs security maintenance tasks:

SCHEDULEDSECURITYTASKS⏰Dailyat1:00AM1.📋ProcessDeclassificationsRecordsscheduledforautomaticdeclassification2.⏳ExpireClearancesDeactivateclearancespasttheirexpirydate3.📧SendExpiryWarningsEmailusers30daysbeforeclearanceexpires4.🔐Cleanup2FASessionsRemoveexpiredtwo-factorauthenticationsessions5.📝AuditLogRetentionRemoveaccesslogsolderthanretentionperiod

Clearance Expiry Notifications

When your clearance is about to expire, you'll receive an email:

Subject:SecurityClearanceExpiryWarningDearJaneSmith,YourSECRETsecurityclearancewillexpireon15March2026(30daysremaining).Pleasecontactyoursecurityadministratortorequestarenewal.Regards,SecurityAdministration

Note: Warnings are sent once per week until the clearance expires or is renewed.


Best Practices

✓DO✗DON'TClassifyatcreationLeaveclassificationblankDocumentthereasonOver-classifyeverythingSetreviewdatesForgettoreviewDowngradewhenappropriateKeepthingssecretforeverReportsecurityconcernsIgnorepolicyviolationsRespondtoexpirynoticesIgnoreemailwarnings

Need Help?

Contact your security administrator or records manager if you:

  • Need a higher clearance level
  • Are unsure how to classify a record
  • Need to request access to restricted materials

Part of the Heratio AHG Framework