Auditable Admin Data Export
Design an administrator export flow that scopes sensitive records, estimates impact, and controls secure delivery.
The brief
Understand the problem
Background
Enterprise exports can contain far more data than an administrator expects, and large jobs may run asynchronously. The destination, retention, field selection, and audit purpose all matter.
User context
Compliance administrator Fatou needs six months of account-access events for a regulated review. She does not need profile notes, message content, or records from other regions.
Product problem
Administrators need a precise, reviewable export without defaulting to all records or leaving downloadable files available indefinitely.
Objective
Create dataset selection, scope preview, approval, generation, and secure retrieval for a sensitive administrative export.
What to design
Define the experience
Required experience
- Choose dataset, fields, filters, and purpose
- Preview count, sensitivity, and sample schema
- Request required approval and generate the file
- Retrieve, verify, and expire the export
Screens and states
- Export builder
- Scope and sensitivity review
- Export job status
- Secure download detail
Core user flow
Follow the critical path
- 01
Fatou selects access events, a date range, and one region
- 02
The preview identifies two sensitive fields and she removes them
- 03
A privacy reviewer approves the scoped request
- 04
Fatou downloads the encrypted file once and confirms scheduled expiry
Product rules
Requirements and constraints
Requirements
- Default to the minimum dataset and make field sensitivity visible
- Estimate row count, file size, generation time, and date coverage
- Require purpose and approval based on policy
- Use expiring retrieval, integrity checks, and complete audit history
Constraints
- Exports cannot bypass source-system permissions
- Sensitive files need encryption and short retention
- Preview rows must follow the same masking rules as the final file
Reality check
States worth considering
Finish line
What to deliver
- Four desktop screens covering scoped creation and secure retrieval
If you want more
Optional extensions
Optional direction
Visual resources
Use these as a starting constraint if you want one. They are not part of the required solution.