A method includes receiving a data access request for a data object from a requesting device of a set of requesting devices associated with the data object. The method further includes determining storage entity data for the data object that includes global metadata, global policies, individual requesting device metadata of each requesting device of the set of requesting devices, and individual requesting device policies of each requesting device of the set of requesting devices. The method further includes determining whether an action of the data access request is compliant with the global policies and consistent with the global metadata. If so, the method further includes determining whether the action triggers one or more global policies and/or one or more individual requesting device polices, and whether global metadata and/or individual requesting device metadata are associated. The method further includes processing the action in accordance with the triggered policies and associated metadata.