Data processing boundary

The product model distinguishes the Workspace customer, its Members, its Case Owners and explicitly authorized support access. Support permissions are purpose-bound, time-bound and limited to selected views and diagnostics.

Deletion immediately removes product access and queues erasure. The local environment displays its own processing status; it does not represent erasure across production processors or backups.

No production subprocessor is connected by this local environment. Identity, AI research, payment and email are replaceable local adapters. A production DPA must enumerate actual processors, regions, retention schedules and the operating entity.

The repository's permission model, data model and release-validation plan define the implementation and verification work needed before production data processing.