Minimal collection
Capture only public metadata and customer facts needed for the selected workflow. Avoid retaining full copies when an excerpt and content hash suffice.
Private storage
Documents, evidence, screenshots, and responses use private storage with short-lived backend-authorized access.
Provider separation
Payment cards and raw identity documents stay with specialist providers. Application logs redact credentials and sensitive fields.
Server authorization
Administrative roles are validated by the API. Client claims alone never authorize internal actions.