In an embodiment, the disclosed technologies include storing, in one or more searchable digital data structures, a set of digital entitlements; where an entitlement of the set of digital entitlements identifies a distinct computer functionality and a downstream service that can perform the distinct computer functionality using digital data; storing, in the one or more searchable digital data structures, a digital data entity; where the digital data entity includes a subset of the set of digital entitlements; storing, in the one or more searchable digital data structures, a digital mapping that associates digital data entities with entitlements of the set of digital entitlements; exposing the set of digital entitlements for use by the downstream service; exposing the digital data entity for use by an upstream service; in response to a creation of or an update of an instance of digital data via the upstream service, using the digital mapping to determine to perform the distinct computer functionality using the instance of digital data or to determine not to perform the distinct computer functionality using the instance of the digital data.