Netlify Maps App Data Across Four Tiers

This is a useful security baseline for agent-built apps, especially because application-level roles do not prevent Netlify project members from browsing raw database records. [Netlify project visibility docs](https://docs.netlify.com/manage/security/secure-access-to-sites/project-visibility/)

• –Separates public, personal, sensitive, and regulated data into actionable protection tiers
• –Gives developers concrete prompts for access control, encryption, audit logging, and privacy-preserving aggregation
• –Correctly warns that regulated data may belong in specialized HR, payroll, or compliance systems
• –Clarifies the difference between app authentication, project visibility, and team SSO
• –Makes security review part of the agent workflow through Ask mode and test accounts