Service overview
About Master Data Management Solution
Understand the business value, delivery considerations and technical decisions involved in planning this service.
Master Data Management (MDM) is the discipline and supporting software used to define, govern, connect, review, and publish important shared business entities such as customers, products, suppliers, locations, employees, accounts, or assets. A Master Data Management Solution creates a controlled way to understand which source records describe the same entity, which attributes are authoritative for a stated purpose, how conflicts are resolved, and how approved data can move to permitted consumers. It is not a button that creates universal truth. A “golden record” is a governed representation assembled under explicit rules; it can still contain gaps, uncertainty, stale source values, and decisions that need human review.
Skillonit can help teams design and develop an MDM solution around a narrow, reviewable business objective: a product catalogue shared between commerce channels, a supplier domain used by procurement systems, a customer or party domain with controlled identity resolution, a location hierarchy, or a reference-data service. Work can include discovery, domain modelling, source assessment, canonical data structures, match and survivorship rules, stewardship workflows, integrations, audit and lineage design, migration, testing, operational handover, and implementation guidance. It does not promise perfect deduplication, unrestricted data sharing, complete data accuracy, regulatory compliance, security, savings, or a single record that is correct for every use.
Direct answer
A Master Data Management Solution is a governed system and operating model for shared business entities. It preserves source identities, applies transparent matching and survivorship rules, routes uncertain records to accountable stewards, and publishes approved views to authorised systems. It is useful when separate applications represent the same customer, product, supplier, location, or other core entity differently and those differences are causing measurable operational risk, inconsistent decisions, rework, reporting confusion, or poor integration behaviour.
The first decision is not which MDM product to buy. It is which domain should be governed, who is accountable for its definition, which processes may create or change it, what evidence supports a match, which attributes may be published, and how errors will be corrected. A small release might standardise supplier identifiers and approval status across an ERP and procurement workflow, retain a crosswalk back to each source record, send ambiguous duplicates to a steward, and publish a controlled API. That is more defensible than copying every available record into a new database and calling it a customer or product “360.”
Definition: master data, transactional data, and reference data
Master data describes relatively stable entities reused across processes. A customer, legal entity, product, supplier, site, employee, account, vehicle, or asset may be master data when many workflows need an agreed identifier and core attributes. Transactional data records an event or activity: an order, invoice, support ticket, shipment, payment, claim, or log entry. A transaction often points to master data, but the two have different lifecycle and retention needs. A customer address on an invoice may be a historically relevant transaction snapshot even if the current customer master record later changes.
Reference data is a controlled set of codes, labels, classifications, or permissible values used to interpret other records. Country codes, currency codes, units of measure, product categories, status codes, regional classifications, and reason codes are common examples. Reference data can look simple until two systems use different meanings for “active,” a local code set is retired, a hierarchy changes, or the same value is displayed in several languages. A responsible MDM design makes these definitions explicit rather than treating them as harmless lookup tables.
| Data type | Example | Primary question | Common risk if unmanaged |
|---|---|---|---|
| Master data | supplier, product, customer, location | What entity is this and which representation is approved for this purpose? | duplicate or conflicting identities propagate between systems |
| Transactional data | purchase order, shipment, invoice | What happened, when, and under which business context? | current master attributes overwrite historical meaning |
| Reference data | country code, product class, status | Which values are permitted and what do they mean? | reports and integrations use incompatible classifications |
| Analytical data | a curated margin model or dashboard measure | How should approved data be combined for a stated decision? | a reporting model is mistaken for the system that governs identity |
MDM is therefore more than data cleansing. Cleansing may parse addresses, standardise formats, remove invalid characters, or identify suspicious values. MDM adds domain ownership, identifiers, relationships, source precedence, matching evidence, stewardship, publication controls, lifecycle rules, and change history. A clean-looking value is not necessarily authorised, current, or suitable for every downstream system.
Why organisations need Master Data Management
Core entities are often created in tools that were bought for different teams and different moments in the business. Sales may create an account in a CRM, finance may create a customer in an ERP, support may capture a requester in a service desk, and an e-commerce platform may keep a shopper profile. The records can legitimately differ because their purposes differ. Problems begin when those differences are hidden, untraceable, or treated as interchangeable.
For example, a business can have more than one valid “customer” representation: a legal bill-to party, a shipping destination, a CRM account, a user profile, a payer, a beneficiary, a household, or a contact. Merging all values into one flat table without a party model may remove distinctions the business needs. Similarly, a product can have a sellable SKU, an engineering part, a purchasable item, a bundle, a service plan, and a marketing listing. A product MDM solution needs a declared domain model and relationship model before it can safely decide which records should be linked.
Common triggers for MDM work include:
- recurring duplicate supplier or customer creation that creates approval, payment, service, or reporting issues;
- product information maintained in spreadsheets, ERP records, PIM tools, marketplaces, and regional catalogues with unclear ownership;
- an acquisition, merger, reorganisation, ERP rollout, PIM rollout, or platform modernisation that needs controlled crosswalks rather than irreversible merging;
- many-to-many location, account, product, legal-entity, or organisational hierarchies that are manually maintained and difficult to explain;
- an integration estate where each application implements its own mappings for the same customer, supplier, or reference codes;
- a regulatory, audit, privacy, procurement, or risk review that requires traceability of the source and change history of a shared entity; or
- analytics teams spending large amounts of time rebuilding identity logic, while the operational systems continue creating inconsistent records.
These are business and operating-model questions as well as technical questions. An MDM programme cannot solve a dispute about who owns a product classification simply by adding a workflow screen. The responsible outcome can be a documented unresolved decision, a source-of-record boundary, a temporary crosswalk, or a narrower domain scope.
MDM use cases and domain-specific patterns
MDM use cases should be described as possible patterns, not as unverified client outcomes. The correct pattern depends on data sensitivity, identifiers, domain lifecycle, source authority, operating model, and intended consumers.
Customer, party, and account master data
Customer MDM can represent individuals, organisations, contacts, households, accounts, legal entities, trading relationships, and roles. The word “customer” should be decomposed before matching starts. A legal entity may own several accounts; a contact may have more than one relationship; a person may be a supplier contact and a customer contact; and a sales account may not be the same thing as a billing account. The solution can use source-specific identifiers, crosswalks, deterministic match keys, weighted evidence, confidence bands, and manual review queues. It should avoid silently joining people because a name, email, or phone number happens to be similar.
Useful capabilities may include normalising selected names and addresses, preserving original values, modelling party roles, managing consent or contact preferences only where authorised, resolving external identifiers, linking related entities, displaying provenance, and publishing a limited party view to permitted consumers. It must not assume that all customer records can be combined or that an MDM hub itself gives permission to market to someone, make a credit decision, or override a legal source system.
Product and catalogue master data
Product MDM often coordinates item identifiers, variants, attributes, categories, specifications, units, bundles, lifecycle state, regulatory labels, media references, channel-specific content, and relationships such as “part of,” “compatible with,” or “replacement for.” A product information management (PIM) platform may be the best authoring environment for rich commercial content, while ERP remains authoritative for supply and costing fields and a commerce platform controls channel publication. MDM can define the cross-domain model and approved exchange rules; it should not erase the need to decide who owns each field.
A product golden record may use survivorship by attribute rather than choosing one system as universally best. For instance, a supply system may own a manufacturer part number, a regulated content workflow may own an approved label, and an e-commerce team may own a channel description. The record should show those origins and approvals. A catch-all “latest wins” rule can accidentally publish an unreviewed field from the wrong application.
Supplier, vendor, and partner master data
Supplier MDM can manage legal-name variants, tax or registration identifiers where lawfully processed, addresses, payment-related references, procurement status, risk classifications, contacts, categories, parent-child relationships, and deactivation. It can reduce the chance that the same vendor is created under different spellings, but it cannot validate that a supplier is legitimate or guarantee that onboarding controls are sufficient. High-impact identifiers and payment attributes should have distinct access, verification, audit, and approval routes.
An implementation might stage inbound suppliers from several purchasing units, retain their local identifiers, run conservative deterministic matching on verified business identifiers where available, send potential duplicates to a procurement steward, and publish an approved supplier view back to purchasing systems. It should retain the fact that two local records were linked, what evidence supported that link, who approved it, and what happens when the link is later disputed.
Location, organisational, and asset master data
Locations can include postal addresses, operational sites, stores, warehouses, service areas, buildings, regions, territories, and virtual delivery points. Organisational entities can include legal entities, cost centres, business units, teams, departments, and reporting units. Assets can include equipment, devices, vehicles, installations, or facilities. These domains need relationship and hierarchy modelling more than aggressive deduplication. A warehouse may have a physical location, a shipping code, an operational owner, a finance reporting unit, and multiple service territories. The model should preserve those distinctions.
Reference data and hierarchy management
Reference-data management maintains shared lists and mappings such as product categories, currencies, units, risk classifications, workflow statuses, industry codes, and regional segments. Hierarchy management describes structures such as product category trees, legal-entity ownership, customer account rollups, supplier groups, organisation reporting lines, and geography. A hierarchy is often time-dependent: a product moves category, an organisation reorganises, or a parent changes. The solution needs effective dates, versioning, approval rules, and published versions rather than quietly overwriting the tree used by historical reports.
What a Master Data Management Solution delivers
The deliverables should be tied to accepted scope. A project does not need every capability on the first release, and a vendor tool alone does not establish a working operating model.
| Deliverable | Purpose | Decision it supports |
|---|---|---|
| Domain charter | Defines entity scope, objectives, exclusions, risks, owners and release boundary | whether MDM is the appropriate intervention |
| Canonical data model | Describes entity attributes, identifiers, relationships, lifecycle states and semantics | what the domain record represents |
| Source and attribute matrix | Names source systems, field origins, authority, classification, update mode and owner | which system may contribute or receive a value |
| Match and survivorship specification | States evidence, thresholds, precedence, confidence, exception handling and approvals | when records can be linked or represented together |
| Stewardship workflow | Defines work queues, decisions, escalation, service targets and audit history | how uncertain or disputed data is handled |
| Integration contract | Describes API, event, batch or file rules, versioning, failure, security and decommissioning | how data moves without hidden dependencies |
| Quality and reconciliation plan | Identifies tests, controls, baseline measures, exceptions and reviewers | what evidence is needed to release or investigate data |
| Runbook and handover | Covers monitoring, incidents, backfills, change control, access review and support boundary | how the service is operated after launch |
Scope exclusions deserve equal visibility. An MDM solution is not automatically a replacement for CRM, ERP, PIM, customer-data platform, data warehouse, identity-and-access platform, consent-management system, data-governance office, data-quality programme, or enterprise-wide migration. It may connect to those capabilities. It should not be sold as a universal substitute for them.
Choosing an MDM operating style
MDM can be implemented as a registry, consolidation hub, coexistence model, centrally authored hub, or a more distributed pattern. The terms vary between platforms, so the important point is the data flow and authority boundary, not a marketing label.
| Style | Description | Useful when | Important constraint |
|---|---|---|---|
| Registry | Links source records and maintains identifiers or crosswalks with limited attribute persistence | sources remain operationally authoritative and identity linkage is the first need | linked records can still expose conflicting source values |
| Consolidation | collects source data into a governed hub for reporting, review or selected downstream use | a shared view is needed without immediately writing back | freshness, access and source correction rules remain necessary |
| Coexistence | hub and source systems exchange approved updates under stated attribute ownership | teams need managed collaboration across systems | bidirectional flows require conflict, retry and audit design |
| Central authoring | one governed hub creates and manages selected master records before distribution | a domain has clear enterprise creation ownership | it can disrupt local processes if stewardship capacity is not ready |
| Federated or virtual | metadata, APIs and governance connect data across domains without centralising all values | data must remain in controlled source contexts | query performance, access enforcement and lineage can become complex |
The initial operating style can change as governance matures. A registry may be the safest first step when there is no agreement on source ownership. Central authoring may be suitable for a new product family with a defined launch process. Coexistence should be chosen only after attribute-level authority, conflict resolution, failure handling, and support responsibilities are credible.
Golden records, matching, and survivorship without false certainty
A golden record is an approved consolidated representation of an entity for a stated domain and purpose. It is not necessarily a copy of one source record, and it is not proof that every attribute is true. The solution should preserve source records and crosswalks so users can answer: Which systems supplied this value? When was it observed? Which rule selected it? Who approved an exception? What confidence or limitation applies?
Match rules
Matching asks whether two or more records likely describe the same entity. Deterministic matching uses exact or controlled comparisons, such as a verified internal identifier, a reliable external identifier, or an agreed combination of fields. Probabilistic or fuzzy matching uses weighted evidence, such as similarity of name, address, phone, or other attributes. Fuzzy methods can generate useful candidates but also create false positives. In sensitive domains, the threshold for automatic linking may need to be high, and uncertain candidates should be routed to a review queue.
Match design should specify normalisation steps, blockers, comparison fields, evidence weighting, thresholds, confidence bands, automatic actions, steward actions, and reversibility. A blocker prevents an implausible comparison from being considered; for example, separate legal registration identifiers may block an organisation merge even if names are close. A review queue should display only the information an authorised steward needs to decide, record reasoning, and avoid making a match look permanent when it can be split later.
Survivorship rules
Survivorship determines what value appears in a governed representation once records have been linked. Rules can choose by verified source authority, attribute recency within an approved window, data-quality score, completeness, workflow approval, confidence, or business priority. A rule must be field-specific and explainable. “Newest value wins” can be wrong when the newest source is only a temporary marketing import. “Most complete record wins” can spread an unverified value. “System A always wins” can be wrong for attributes System A does not own.
An MDM solution can keep multiple values with a preferred representation rather than deleting disagreement. For a supplier, one source may have a local trading name while a legal system has a registered name. For a product, an engineering specification and a marketplace description can both be valid in their contexts. The goal is governed context, not forced uniformity.
Stewardship and exceptions
Stewardship is the human accountability layer for rules that cannot safely decide alone. A steward may approve a suggested match, resolve a conflict, complete required data, request source correction, retire a duplicate, approve a hierarchy change, or reject a publication. The workflow should have roles, queues, priority, evidence, permissions, approvals, escalation, audit events, and a way to reverse or supersede a decision. It should never become a hidden backlog where exceptions disappear.
An effective queue distinguishes an automatic match, a possible match awaiting review, a source-data defect, a missing mandatory field, a blocked publication, a hierarchy conflict, and an integration error. These need different owners. A data steward cannot resolve a broken OAuth credential; an integration engineer should not decide a legal-entity relationship without business authority.
Architecture for governed master data
An MDM architecture should make domain roles and flows understandable. The exact tools can be cloud, on-premises, or hybrid depending on approved requirements. A typical logical design includes source systems, ingestion or connection adapters, a canonical domain service, match and survivorship processing, stewardship workflows, a metadata and audit layer, publication interfaces, and observability.
``text Approved source systems: CRM | ERP | PIM | procurement | commerce | files │ contracts, source ownership, classification, credentials and change controls ▼ capture and validation ─► source records / crosswalks ─► candidate matching │ │ │ ▼ │ stewardship and approvals ▼ │ canonical domain model ◄── survivorship / hierarchy versioning │ ▼ authorised APIs, events, batch views and downstream consumers │ catalogue, lineage, audit events, quality status, monitoring and runbooks ``
The canonical model should use stable identifiers that do not expose unnecessary business meaning. It can retain source system identifiers as crosswalks. It should model relationships explicitly: organisation to contact, customer to account, product to variant, location to site, supplier to parent group, or entity to hierarchy node. Relationship types, effective dates, source evidence and owners often matter more than adding more attributes.
The hub should keep a distinction between source record, candidate cluster, mastered entity, publication view, and analytical view. A source record describes what a source provided. A candidate cluster represents a possible relationship under evidence. A mastered entity is an approved domain representation. A publication view applies consumer-specific filtering and shape. An analytical view may join the master domain to transactions. Collapsing these layers makes it difficult to correct a source, explain a decision, or limit disclosure.
Integrations and data flows
MDM integration is a contract, not merely a connector. Every source and consumer should have an owner, business purpose, entity scope, attribute scope, classification, authentication method, update mode, schema version, idempotency approach, failure behaviour, reconciliation method, operational contact, and retirement plan. A diagram without these rules is unlikely to remain reliable as systems change.
Inbound source integration
Inbound flows may use APIs, database change data capture, messages, managed connectors, secure files, or controlled batch extracts. The implementation should record source record identifiers, extraction or event time, source version, received time, schema version, batch or offset, validation result, and error state. A successful HTTP response or file transfer does not prove the expected entity set arrived. Pagination, late records, deletes, retries, duplicates, schema changes, access expiry, rate limits, and source outages need explicit handling.
Source systems should retain their authority unless a documented rule says otherwise. A CRM may remain the source for opportunity-related account context; an ERP may remain authoritative for financial customer status; a PIM may own channel catalogue content; a procurement application may own supplier onboarding state. The MDM service can maintain an approved shared representation without writing arbitrary updates back to every source.
Outbound publication
Publication can use an API for lookups, events for change notifications, batch files for legacy consumers, secure data shares, or synchronisation connectors. Consumers should receive only the attributes and relationships they are authorised to use. A commerce system may need product content and sellable state but not supplier payment information. A BI environment may need a privacy-reviewed view rather than raw identifiers. A downstream event should include a stable master ID, event type, version, effective time, and enough context to fetch the current authorised view; it should not force every subscriber to reconstruct the domain from ungoverned deltas.
Conflict and write-back behaviour
Bidirectional integration is particularly risky. If a source changes an attribute after the MDM hub publishes a preferred value, the system needs a declared rule: source wins, hub wins, steward review is required, or the attributes are different concepts. Write-back must not override local legal, financial, or operational controls simply because an integration has a newer timestamp. Version checks, idempotency keys, ordered processing where required, exception queues, audit records, and safe retries are essential.
Data governance, lineage, and auditability
MDM governance assigns accountable people and clear decisions. A data owner may be accountable for semantic policy and fit for purpose. A data steward may work exceptions and maintain approved values. A data custodian or platform team may operate controls and access. Source-system owners remain accountable for their system’s business process and data capture. Privacy, security, legal, compliance, and records-management stakeholders may need to review high-impact processing. These roles must be adapted to the organisation; a generic RACI table does not establish authority.
Lineage should trace a published master attribute or relationship to the source record, source field, ingestion time, mapping, match rule, survivorship rule, workflow decision, code or configuration version, and publication event. This does not authorise broad data access. A catalogue can expose metadata and definitions without exposing sensitive values. Audit events should record who or what performed an action, when, through which interface, what changed, why where available, and which approvals applied. Logs must minimise sensitive values and protect credentials and tokens.
Data quality in MDM is not a single score. Useful dimensions can include completeness, conformance, validity, uniqueness, consistency, timeliness, and relationship integrity. Each metric needs a defined population, threshold, observation time, owner, limitation, and action route. A domain could be complete for mandatory ERP fields yet unsuitable for an e-commerce catalogue. A higher score should not be mistaken for an independent assurance conclusion or a guarantee that the record is correct.
Security, privacy, and compliance considerations
Master data can become a high-value target because it brings together identifiers and relationships from several systems. Security design should be proportionate to the actual domain. Common controls include least-privilege roles, separation of duties, environment separation, service identities, managed secrets, credential rotation, encryption in transit and at rest where appropriate, network restrictions, API authentication and authorisation, row and column policy, protected export routes, change approvals, dependency review, audit logging, backup and restore testing, incident response, and regular access review.
Privacy and legal requirements are context-specific. Purpose limitation, minimisation, retention, consent, deletion, data-residency, cross-border transfer, legal hold, data-subject rights, sector rules, and record-keeping obligations require review by qualified stakeholders for the actual processing activity. A hash, token, or masked UI does not by itself make data anonymous or safe to repurpose. The MDM design should identify where sensitive fields arrive, are transformed, appear in queues, get exported, are logged, and are retained. It should state approved uses and unresolved review items rather than claiming compliance.
For health, finance, employment, identity, children’s, or other sensitive data, match design needs special caution. Broad matching can create harmful associations, duplicate removal can suppress a legitimate person or organisation, and publication can expose more information than a consumer needs. Human review, source authority, false-positive handling, access boundaries, and adverse-impact escalation should be designed before large-scale propagation.
Accessibility and user experience for stewardship
MDM is primarily back-end and operational software, but stewardship screens, approval queues, catalogues, and run dashboards are decision interfaces. A user must be able to see what is being compared, which fields differ, why a rule produced a suggestion, which source each value came from, how confident the system is, and what action will occur after approval. A visual “merge” button with no evidence is not a safe user experience.
Accessible interfaces should use semantic labels, logical headings, keyboard-operable controls, visible focus, descriptive form errors, adequate contrast, scalable text, reflow on smaller screens, and status text that does not rely only on colour or an icon. Comparison tables need row and column headers, an accessible reading order, and a non-drag-only way to select a preferred value. A decision history should be understandable without requiring users to parse raw JSON. Guidance for an informative comparison illustration might read: “Two supplier records show matching registration identifier and address, while their trade names differ; the steward can inspect source evidence and approve, reject, or defer the proposed link.”
Automation can help prioritise likely duplicates, but it must not hide uncertainty. Rules should explain which inputs were considered, what was not considered, and when human review is required. Machine-learning-assisted matching, if introduced, requires an explicit evaluation plan, data-use review, versioning, false-positive and false-negative monitoring, rollback route, and governance review. It should not be described as unbiased or self-correcting without evidence.
Performance and Core Web Vitals
MDM performance has two dimensions: data processing behaviour and user-facing web performance. Data processing plans should state expected entity counts, change rate, source limits, matching workload, hierarchy complexity, batch window, recovery time objective, concurrency, archival policy, and allowed maintenance windows. A fast merge that incorrectly joins records is not a successful performance result. A lower-latency API may be inappropriate for an infrequently changing supplier domain if it creates unnecessary source load and risk.
Useful engineering approaches can include incremental processing, stable checkpoints, partitioning by domain or source, idempotent upserts, versioned hierarchy snapshots, indexed search appropriate to approved fields, asynchronous review queues, rate-limited source calls, caching with visible as-of time, bounded retries, back-pressure, and controlled backfill jobs. Each choice has trade-offs. A cache must say when it was built; a batch needs late-arriving data rules; parallel calls can exceed provider limits; and reprocessing needs a publication and reconciliation plan.
For the public service page and any stewardship web interface, monitor meaningful content loading, interaction responsiveness, visual stability, accessibility defects, JavaScript errors, API errors, user-visible failure messages, and availability. Core Web Vitals provide useful measurements for loading, interaction, and layout stability, but they do not prove a golden record is correct. A performance budget, server-rendered meaningful page content where applicable, minimal client scripts, responsive images, and testing on mobile and lower-bandwidth connections are practical release measures.
Technical SEO and international publishing state
This global Master Data Management Solution authority-page draft has one intended canonical path: /services/master-data-management-solution/. Its SEO title, meta description, H1, Open Graph inputs, and breadcrumb describe the same service. The draft is deliberately marked contentStatus: editorial_review, robots: noindex,follow, and sitemapEligible: false. It must remain outside XML sitemaps until human editorial, claims, route, canonical, rendered-page, accessibility, security-header, and structured-data validation are complete.
No fully translated and editorially reviewed equivalents exist, so hreflang and x-default are not configured. A location route must not be created merely by replacing a city or country name. Any future country or city page begins editorial_review, noindex,follow, and sitemap-ineligible until it contains verified local demand, delivery context, lawful compliance review, language, currency, timezone, relevant industry detail, original FAQs, meaningful internal links, similarity approval, and human editorial approval. The route must not imply an office, local team, or local legal entity without evidence.
If structured data is implemented at release, it may describe only visible and supported Organization, WebSite, BreadcrumbList, Service, and FAQ content. It must not add reviews, aggregate ratings, prices, customer names, offices, awards, certifications, availability claims, or results that are not visibly evidenced. Structured data improves consistency for machines; it does not guarantee a ranking, rich result, AI citation, traffic, or leads.
Discovery-to-launch delivery process
An MDM delivery should establish decision evidence before data is broadly synchronised. The phases below are a practical framework; actual sequencing depends on access, scope, risk, and stakeholder availability.
- Framing and domain selection. Define the target domain, business process, consumers, exclusions, risks, success evidence, and accountable owners. Confirm that MDM—not only a reporting model, data-quality fix, or integration—is the needed intervention.
- Source and governance discovery. Inventory source systems, identifiers, attributes, relationships, creation processes, classifications, access constraints, source authority, data contracts, known defects, and lifecycle rules. Capture unresolved policy questions.
- Domain and publication design. Create the canonical entity model, relationship model, reference data, hierarchy versioning, attribute ownership matrix, publication views, integration contracts, and security model.
- Rules and workflow design. Specify validation, matching, survivorship, exception, steward, approval, audit, reversal, conflict, and change-management rules. Test difficult scenarios before implementation.
- Incremental implementation. Build controlled ingestion, crosswalks, rules, stewardship screens or integrations, APIs or events, monitoring, metadata, infrastructure configuration, and documentation in small demonstrable slices.
- Evidence and controlled rollout. Run functional, integration, data-quality, security, accessibility, performance, migration, rollback, and operational tests. Reconcile defined samples and publish only approved consumers under a release plan.
- Handover and improvement. Transfer runbooks, ownership, support paths, alert tuning, review cadence, backlog, access-review process, and enhancement decision process. Keep change history and source contracts current.
Acceptance evidence can include an approved domain charter, source-access confirmation, a versioned canonical model, field-level authority matrix, match and survivorship test scenarios, reconciled migration scope, role-based access tests, exception workflow demonstrations, API or event contract tests, audit-event review, monitoring and incident simulation, deployment record, and handover materials. It does not create a guarantee that future sources will remain consistent or that stakeholders will adopt every governance decision.
Testing and quality assurance
Testing needs to cover rules, relationships, data movement, access, operations, and business interpretation. A match rule can pass unit tests and still create unacceptable false positives on representative data. A hierarchy can look correct in one UI but fail historical reporting after a reorganisation. A service can authenticate correctly but disclose an attribute in a downstream export. Test evidence should therefore include both automated checks and authorised human review.
| Test area | Example evidence | Limitation to keep visible |
|---|---|---|
| Domain-model tests | required fields, identifiers, relationship cardinality, lifecycle state rules | a valid schema does not prove a business definition is appropriate |
| Match tests | known duplicate and non-duplicate scenarios, threshold behaviour, override and reversal tests | a sample cannot prove every future match is correct |
| Survivorship tests | attribute-level precedence, effective dates, source fallbacks, stale-value handling | rule success does not validate the contributing source |
| Stewardship tests | queue routing, approval, rejection, escalation, audit and access paths | a working queue still needs trained accountable users |
| Integration tests | schema, retries, idempotency, version handling, late events and failure recovery | a test connector does not guarantee vendor availability |
| Security tests | role restrictions, secrets handling, export controls, audit visibility and incident route | controls reduce risk; they do not guarantee security or compliance |
| Accessibility tests | keyboard navigation, labels, zoom, reflow, contrast and assistive-technology checks | automated tooling alone cannot establish comprehensibility |
| Migration tests | counts, crosswalks, exceptions, rollback rehearsal and scoped reconciliation | reconciliation does not prove source facts are universally accurate |
Quality gates should have named owners and clear actions. A data-quality failure could block publication, send records to a steward, trigger a source defect ticket, or require a documented exception. An alert without a business impact statement and escalation route often becomes noise. Logs should capture technical detail for troubleshooting while avoiding unnecessary personal or confidential data.
Deployment and migration planning
Deployment can use infrastructure as code, versioned data-model configuration, versioned rules, controlled environments, change approvals, secret management, deployment logs, rollback procedures, and post-release observation. Configured match rules, source precedence, hierarchy versions, and workflow steps should be promoted like code rather than edited invisibly in production. Emergency changes should retain an audit record and subsequent review.
Migration requires its own plan. It should define source snapshot or change-capture boundary, mapping version, expected entity count, crosswalk rules, match confidence thresholds, exception policy, reconciliation population, cutover or coexistence model, backout conditions, consumer readiness, and data-retention implications. A large one-time merge is usually difficult to undo. Conservative linking, preserved source records, reversible associations, staged consumers, and steward review reduce the impact of wrong decisions.
During coexistence, users need to know where a correction should be made. If a supplier address is corrected in the ERP but the MDM hub is the authoring system for that field, the flow must either reject, route, or reconcile the change predictably. “Edit it anywhere” often creates a race between systems. A clear source-of-entry and publication path is more valuable than an apparently flexible interface that hides conflicts.
Timeline factors
An MDM implementation timeline is project-dependent. It is driven less by a vendor demonstration than by domain complexity and organisational decisions. Meaningful factors include the number and quality of sources, entity volume, identifier reliability, match ambiguity, number of relationships and hierarchies, attribute-level ownership agreement, security and privacy review, integration modes, legacy constraints, stewardship capacity, migration scope, test-data access, deployment governance, and consumer readiness.
A narrow registry or consolidation pilot with a small number of sources can be planned differently from a coexistence design that writes approved customer or product changes back to several operational systems. Extra time may be appropriate when data is sensitive, source documentation is missing, business definitions conflict, local processes differ, or an acquisition has historical records that need conservative treatment. A responsible plan names dependencies and decision points rather than promising a fixed outcome before discovery.
Cost factors
MDM cost is not only licence cost. It can include discovery and governance workshops, architecture, modelling, integration development, source remediation, matching and stewardship configuration, migration, testing, security review, environments, infrastructure, data-platform compute and storage, observability, training, support, change management, ongoing stewardship, and vendor usage fees where applicable. A cheap initial connector can create high ongoing cost if it continually produces ambiguous or untraceable records.
The sensible comparison is total operating responsibility for the chosen domain. A central solution may reduce repeated mappings for some consumers but may also introduce stewardship and platform obligations. A distributed model may leave data in sources but require stronger metadata and API governance. Request a scoped estimate only after the domain, sources, consumers, operating style, integration pattern, and risk boundaries are understood. No cost structure should be presented as a promised saving.
Maintenance, support, and modernisation
MDM requires active operation after launch. Sources add fields, identifiers change, products are retired, suppliers reorganise, reference values evolve, hierarchy versions change, new consumers request access, and business ownership changes. Maintenance can include source-contract review, schema-change handling, rule tuning with controlled evidence, queue monitoring, access review, credential rotation, dependency updates, backup and restore exercises, lineage maintenance, quality-metric review, incident learning, documentation updates, and periodic governance review.
Modernisation may involve replacing fragile file exchanges, moving from a spreadsheet-maintained hierarchy to a versioned service, separating an overloaded CRM account model from a governed party domain, converting point-to-point mappings into APIs or events, or migrating a legacy hub. The decision should preserve historical explainability and avoid treating a new platform as permission to discard source identifiers or audit history. A decommission plan must consider downstream dependencies, retention, legal review, exports, and transition ownership.
Decision criteria and comparisons
Buyers often compare MDM with systems that solve adjacent problems. These comparisons help establish scope; they are not a substitute for a discovery assessment.
| Capability | Best primary purpose | What it does not automatically provide |
|---|---|---|
| MDM solution | governed shared entities, relationships, identity linkage, stewardship and publication | full transactional process management or all analytics |
| CRM | sales, service and relationship workflows | enterprise-wide authority for every customer, supplier or legal entity attribute |
| ERP | finance, procurement, inventory and operational transactions | rich multi-channel product content or cross-system identity rules by default |
| PIM | product-content authoring, enrichment and channel publication | supplier, customer and organisational master governance across all systems |
| Data warehouse/lakehouse | analytical storage, transformations and reporting workloads | operational stewardship and canonical master-data authority |
| Customer data platform | audience, activation and customer-engagement data use | a universal, lawful party master or financial/legal source of record |
| Data-quality tool | profiling, standardisation, validation and remediation support | domain ownership, lifecycle and publication governance by itself |
| API/integration platform | controlled connectivity and orchestration | a model for deciding which entity values should be preferred |
An MDM initiative is more likely to be justified when business users need a governed shared entity across systems and are ready to name domain owners and stewards. It may be premature when the only need is a single dashboard, when sources lack a stable process owner, when no consumer has a defined need for shared data, or when the organisation expects automation to resolve ambiguous identity without accepting a review process.
Frequently asked questions
Is MDM the same as a single source of truth?
No. MDM can maintain an approved representation for a defined domain and purpose, but different systems can remain authoritative for different attributes or processes. It is more accurate to describe source authority, publication scope, rules, and limitations than to promise one universal truth.
Can MDM remove every duplicate customer, supplier, or product?
No. Some duplicate candidates are ambiguous, and matching rules can make mistakes. A sound solution uses explicit evidence, conservative thresholds, source identifiers, reversible links, and stewardship workflows rather than promising perfect deduplication.
What is the difference between matching and survivorship?
Matching decides whether records may describe the same entity. Survivorship decides which attribute value or relationship appears in a governed representation after records are linked. They need separate, explainable rules.
Does an MDM hub replace ERP, CRM, or PIM?
Usually not. It can coordinate shared master data with those systems, while they continue to operate their intended business processes. Whether a field is authored centrally or in a source must be decided at attribute level.
How should a company start an MDM project?
Start with one business domain and a decision that suffers from inconsistent identity, relationships, or reference values. Identify owners, sources, consumers, risks, and an achievable first publication use case. Avoid starting with every entity across the enterprise.
How are hierarchy changes handled?
The solution should version hierarchies, capture effective dates, retain approvals and lineage, and make clear whether consumers use current, historical, or as-of versions. Silent hierarchy overwrites can invalidate reporting interpretation.
Can MDM support privacy and security obligations?
It can support controlled access, minimisation, lineage, audit, retention design, and approved publication views. It does not independently guarantee security, privacy, or compliance; qualified stakeholders must review the actual requirements and implementation.
What information is needed for a scope estimate?
Useful inputs include the target domain, known source systems, approximate entity and change volume, identifiers, consumers, integration needs, sensitivity classification, hierarchy needs, steward availability, migration expectations, security constraints, and release evidence required by the organisation.
Start a Master Data Management discussion
To discuss a Master Data Management Solution, begin with the specific entity that is causing operational friction: customer or party, product, supplier, location, asset, reference data, or a hierarchy. Bring representative source examples, the systems that create and consume the entity, the decisions affected by inconsistent data, known duplicate or conflict patterns, current owners, access constraints, and any pending migration or integration milestones. Skillonit can help structure a discovery process, define a narrow first release, and identify the work that should remain with business, privacy, security, legal, and source-system owners.
The appropriate next step may be an architecture and governance assessment rather than an immediate implementation commitment. The goal is a transparent scope, not a promise that software alone will reconcile every organisation-wide disagreement.
Related services
- Data Analytics Platform Development for governed analytical environments that consume approved domain data.
- Business Intelligence Dashboard Development for decision interfaces that should show data freshness, definitions, and limitations.
- Data Warehouse Development for analytical modelling and transformation workloads distinct from master-data governance.
- Data Lakehouse Development for managed raw, curated, and analytical data layers.
- Data Governance Consulting for ownership, policy, metadata, and lifecycle operating-model work.
- Data Quality Management Solution for profiling, validation, remediation, and quality-observability patterns.
- ETL and ELT Development for traceable extraction, loading, transformation, and reconciliation workflows.
- API Integration Services for controlled system-to-system interfaces around approved contracts.
Editorial source notes
These sources inform the technical and publishing guidance on this page. They are editorial references, not a claim that any proposed implementation is certified, compliant, or endorsed by their publishers.
- NIST Privacy Framework for privacy risk-management concepts that should be assessed in the real processing context.
- NIST Cybersecurity Framework 2.0 for governance and cybersecurity risk-management guidance.
- W3C Web Content Accessibility Guidelines overview for accessible stewardship and operational interfaces.
- Google Search guidance on generative AI content for people-first, original content expectations.
- Google structured data policies for truthful, visible-content-aligned structured data.
- web.dev Core Web Vitals guidance for performance measurement of public pages and user-facing interfaces.

