An example method includes storing in memory a digital model that includes a plurality of subsystems representing different functions of a system, where each subsystem includes model elements, and design responsibility for different ones of the model elements is assigned to different engineering teams. The method includes receiving, from a user not part of a first engineering team, a request to access a particular model element of a particular subsystem, wherein design responsibility for the particular model element is assigned to the first engineering team, and the particular model element includes at least one redaction implemented according to a security policy of the first engineering team. The method includes performing at least one of facilitating delivery of a redacted version of the particular model element to the user that includes the at least one redaction, and facilitating delivery of an unredacted version of the particular model element to the user.