Privacy
Operational data-handling summary — owner/legal publication review required.
Data boundaries
Non-public records are workspace-scoped and authorized on the server. Public verification exposes only approved certificate fields.
Evidence and audit data
Evidence metadata and append-only audit events support reproducibility. Raw sensitive documents must not be placed in logs or AI prompts.
Retention
Irreversible purge remains disabled until exact retention durations receive owner and legal approval. Historical rating, valuation, and certificate snapshots are not silently overwritten.
Service providers
Approved hosting, email-delivery, analytics, and production signing providers must be listed here before production publication.