How should the sharing of information within an organization be documented?

With a binding contract. 

With a data flow diagram. 

With a disclosure statement. 

With a memorandum of agreement.