Enforcement flow for pipelines that include entitlements

One or more computer storage media storing computer-useable instructions that, when used by one or more computing devices, cause the one or more computing devices to perform operations comprising:

• receiving a request from a data consumer to trigger a data privacy pipeline required to execute within a data trustee environment;
• identifying all root entities of the data privacy pipeline requiring an entitlement from a grantor that is not a participant to the data privacy pipeline;
• identifying a set of contracts governing access to the root entities within the data trustee environment and defining a valid access path for each of the root entities such that the data privacy pipeline can use the root entities while fulfilling constraints and policies defined by the set of contracts, the constraints applicable upon accessing the root entities, the policies applicable to computations of the data privacy pipeline that are downstream from the root entities;
• and
• triggering execution of the data privacy pipeline within the data trustee environment using the identified set of the contracts to access the root entities, without exposing the root entities.

A method comprising:

• receiving a request from a data consumer, to trigger a data privacy pipeline required to execute within a constrained environment that is inaccessible to the data consumer, and to export from the constrained environment data generated by the data privacy pipeline;
• determining that executing the data privacy pipeline within the constrained environment would satisfy an associated entitlement to use a root entity of the data privacy pipeline within the constrained environment, the associated entitlement specifying a constraint on accessing the root entity within the constrained environment and a policy on downstream computations within the constrained environment deriving from the root entity;
• determining that the data consumer has permission to export the data from the constrained environment;
• and
• triggering execution of the data privacy pipeline within the constrained environment using the root entity pursuant to the associated entitlement, without exposing the root entity.