Data and AI policy

Awaiting approved copy. This page is live so that footer links do not break during the rebuild. The approved policy should cover data ownership, the scope and expiry of permissioned access, agent activity, records retention, and revocation — reviewed by counsel before publication.