Privacy

Identity documents are stored only in private review storage, never public. Sensitive fields are masked, access is logged, and retention schedules apply.