Abstract: A technical architecture system comprises a memory, an interface, and a processor. The system stores a plurality of risk areas, receives a request to send data to a third-party entity and retrieves architecture information associated with an architecture of the third-party entity. The architecture information corresponds to at least one of the plurality of risk areas. The system also determines a risk rating of the architecture for at least one of the plurality of risk areas. The risk rating is based on the architecture information. The system may further determine a weight based on the at least one of the plurality of risk areas and determine an area score based on the risk rating and the weight. Finally, the system determines whether to grant permission to send the data to the third-party entity based at least in part on the area score.