Electronic multi-tenant data management systems and clean rooms

1 . A method comprising:

obtaining a first data corpus from a first data provider and a second data corpus from a second data provider, the first data corpus and the second data corpus both being encrypted by a same public key;

establishing a criteria for accessing the first data corpus and the second data corpus;

identifying an attestation for at least one of the first data corpus or the second data corpus, the attestation including a pre-approval that a particular type of request is permissible, the type of request including at least one of: a block of code; a function; a query; a query template; a report type, or a machine instruction;

correlating the first data corpus with the second data corpus;

generating a predictive model based on the first data corpus and the second data corpus;

receiving a request for a report from a first data requester;

determining whether to grant the request for the report by validating a first access criteria with the first data provider and a second access criteria with the second data provider, wherein validating the first access criteria includes determining that the report requested from the first data requester is of a type that has been pre-approved according to the attestation;

if the first access criteria and the second access criteria are met, generating the report, and if the first access criteria or the second access criteria are not met, rejecting the request for the report;

validating the report based on the first access criteria, the second access criteria, and a data management requirement;

transforming the report based on the first access criteria and the second access criteria; and

in response to the transformed report satisfying the data management requirement, providing the transformed report and the predictive model to the first data requester, wherein generating the report includes:

receiving a first private key from the first data provider and a second private key from the second data provider;

decrypting the first data corpus and the second data corpus using the public key, the first private key, and the second private key, and

wherein the report is generated in view of the decrypting.

2 . The method of claim 1 wherein:

the data management requirement is associated with a data enforcer, the data enforcer being different from the first data provider and the second data provider.

3 . The method of claim 2 further comprising:

providing access to the first data corpus and the second data corpus to the data enforcer; and

providing the request for the report to the data enforcer.

4 . The method of claim 1 wherein correlating the first data corpus with the second data corpus:

identifying a first group of data in the first data corpus associated with a particular identifier;

identifying a second group of data in the second data corpus associated with the particular identifier; and

correlating the first group of data in the first data corpus with the second group of data in the second data corpus.

5 . The method of claim 1 further comprising:

obtaining a third data corpus from a third data provider;

identifying a third access criteria of the third data corpus;

receiving a second request for a second report from the first data requester;

correlating the third data corpus with the first data corpus and the second data corpus;

determining whether the third access criteria is met; and

if the third access criteria is met, generating the second report, and if the third access criteria is not met, rejecting the second request.

6 . The method of claim 1 further wherein the step of validating the first access criteria is performed by at least one of the first data provider and a first data provider validator, and the step of validating the second access criteria is performed by at least one of the second data provider and a second data provider validator.

7 . The method of claim 1 , wherein identifying the attestation includes:

identifying a candidate for the attestation;

sending the candidate for the attestation for approval;

receiving a response regarding the attestation of the candidate for the attestation, the response indicating that the particular type of request is permissible; and

storing the response regarding the attestation.

8 . The method of claim 1 , wherein the attestation is received by the first data provider and the second data provider.

9 . The method of claim 4 , wherein the particular identifier is for an audience.

10 . The method of claim 9 , wherein correlating the first group of data in the first data corpus with the second group of data in the second data corpus includes correlating the first group of data and the second group of data with the audience.

11 . A non-transitory computer-readable medium having encoded therein programming code executable by a processor to perform operations comprising:

obtain a first data corpus from a first data provider and a second data corpus from a second data provider, the first data corpus and the second data corpus are encrypted;

establish a criteria for accessing the first data corpus and the second data corpus;

correlate the first data corpus with the second data corpus;

generate a predictive model based on the first data corpus and the second data corpus;

receive a request for a report from a first data requester; and

determine whether to grant the request for the report by validating a first access criteria with the first data provider and a second access criteria with the second data provider, wherein validating the first access criteria includes determining that the report requested from the first data requester is of a type that has been pre-approved according to an attestation;

if the first access criteria and the second access criteria are met, generating the report after decrypting the first data corpus and the second data corpus, and if the first access criteria or the second access criteria are not met, rejecting the request for the report;

validate the report based on the first access criteria, the second access criteria, and a data management requirement;

transform the report based on the first access criteria and the second access criteria; and

in response to the transformed report satisfying the data management requirement, provide the transformed report and the predictive model to the first data requester.

12 . The non-transitory computer-readable medium of claim 11 wherein:

the data management requirement is associated with a data enforcer, the data enforcer being different from the first data provider and the second data provider.

13 . The non-transitory computer-readable medium of claim 12 further comprising:

provide access to the first data corpus and the second data corpus to the data enforcer; and

provide a first search query and the first search results to the data enforcer.

14 . The non-transitory computer-readable medium of claim 11 wherein correlating the first data corpus with the second data corpus:

identify a first group of data in the first data corpus associated with a particular identifier;

identify a second group of data in the second data corpus associated with the particular identifier; and

correlate the first group of data in the first data corpus with the second group of data in the second data corpus.

15 . The non-transitory computer-readable medium of claim 11 further comprising:

obtain a third data corpus from a third data provider;

identify a third access criteria of the third data corpus;

receive a second request for a second report from the first data requester;

correlating the third data corpus with the first data corpus and the second data corpus;

determine whether the third access criteria is met; and

if the third access criteria is met, generating the second report, and if the third access criteria is not met, rejecting the second request.

16 . The non-transitory computer-readable medium of claim 11 further wherein validation of the first access criteria is performed by at least one of the first data provider and a first data provider validator, and validation of the second access criteria is performed by at least one of the second data provider and a second data provider validator.

17 . A system comprising

one or more processors; and

one or more computer-readable media configured to store instructions that in response to being executed by the one or more processors cause the system to perform operations, the operations comprising:

obtaining a first data corpus from a first data provider and a second data corpus from a second data provider;

establishing a criteria for accessing the first data corpus and the second data corpus;

correlating the first data corpus with the second data corpus;

generating a predictive model based on the first data corpus and the second data corpus;

receiving a request for a report from a first data requester;

determining whether to grant the request for the report by validating a first access criteria with the first data provider and a second access criteria with the second data provider, wherein validating the first access criteria includes determining that the report requested from the first data requester is of a type that has been pre-approved according to an attestation;

if the first access criteria and the second access criteria are met, generating the report after decrypting the first data corpus and the second data corpus, and if the first access criteria or the second access criteria are not met, rejecting the request for the report;

validating the report based on the first access criteria, the second access criteria, and a data management requirement; and

transforming the report based on the first access criteria and the second access criteria.

18 . The system of claim 17 wherein:

the data management requirement is associated with a data enforcer, the data enforcer being different from the first data provider and the second data provider.

19 . The system of claim 18 further comprising:

providing access to the first data corpus and the second data corpus to the data enforcer; and

providing a first search query and the first search results to the data enforcer.

20 . The system of claim 17 wherein correlating the first data corpus with the second data corpus:

identifying a first group of data in the first data corpus associated with a particular identifier;

identifying a second group of data in the second data corpus associated with the particular identifier; and

correlating the first group of data in the first data corpus with the second group of data in the second data corpus.

21 . The system of claim 17 further comprising:

obtaining a third data corpus from a third data provider;

identifying a third access criteria of the third data corpus;

receiving a second request for a second report from the first data requester;

correlating the third data corpus with the first data corpus and the second data corpus;

determining whether the third access criteria is met; and

if the third access criteria is met, generating the second report, and if the third access criteria is not met, rejecting the second request.

22 . The system of claim 17 further wherein the step of validating the first access criteria is performed by at least one of the first data provider and a first data provider validator, and the step of validating the second access criteria is performed by at least one of the second data provider and a second data provider validator.