International Classification Label for Access and Sharing Standard
iCLASS: a shared language for classification.
Keep your own classification markings. Add a standard label that people and systems can understand across organisations, countries and tools.
The iCLASS standard
Different policies.
A common understanding.
iCLASS adds a shared label alongside the originator’s existing classification marking. It carries the originator, sensitivity level and release conditions in human-readable and machine-readable forms.
The local marking and its handling policy remain in force. The common label helps recipients understand how to protect the information.
Seven levels · increasing protection
From public access
to the strictest confidence.
Start with information for everyone. Each step narrows the permitted audience and increases the protection needed. Public release must be an explicit decision, not an assumption.
P — Public
For everyoneApproved for public release and unrestricted distribution.
U — Unclassified
Check before sharingNot classified; this does not automatically mean approved for public release.
O — Official
Official purposesLimit circulation to the intended working audience under your policy.
R — Restricted
Authorised recipientsShare only within the permitted audience and release conditions.
C — Confidential
Specific need to knowRestrict access to authorised people with a defined business or administrative need.
S — Secret
Tightly controlled accessDisclosure could seriously compromise important operations or interests.
T — Top Secret
Never disclose outside authorised accessUnauthorised disclosure could cause complete compromise or failure of the business or administration.
Top Secret: no unauthorised sharing. Ever.
Keep access confined to explicitly authorised people with a need to know and within approved release conditions. Disclosure beyond that boundary could mean complete compromise or failure of the business or administration.
Marking and label
Your policy retains its authority.
A classification marking expresses the originator’s binding policy. An iCLASS label represents that marking in a shared form; it does not replace the policy or create permission to share.
Map local classifications through the appropriate organisational or inter-entity agreement. Similar words do not by themselves establish equivalence.
A readable label
iCLASS//BEL//SECRET//REL: DEU, USA//
Illustrative example: originated by Belgium, labelled Secret, with release to Germany and the United States under the applicable authorisation.
For non-public information, absence of a release caveat must not be interpreted as permission to distribute it externally.
Structured technical information
Three fields.
The same essential context.
- org — Originator
- The entity responsible for the classification.
- class — Classification
- One of the seven codes: P, U, O, R, C, S or T.
- rel — Releasability
- The permitted release communities, subject to the policy and required authorisations.
{
"iCLASS": {
"org": "BEL",
"class": "S",
"rel": ["DEU", "USA"]
}
}
Illustrative technical representation from the standard. Storage and enforcement depend on the implementing application.
Explore the syntax and full standard →Use iCLASS in ClassifyIt.
ClassifyIt 7.0 maps Office classification to iCLASS information and carries the context into CI-TDF exchanges. Gateways and DLP systems need to be configured to interpret your policy; a label alone is not an access-control decision.
Bring your policy into Office
See what fits your team.
Discuss your markings, your Office environment and a practical evaluation.