Privacy
Public metadata by default.
GAIP does not require accounts for discovery. Relationship data is retained only with a declared purpose, provenance, consent state, and bounded retention. Protected packet contents and secrets are excluded from public history and operational CRM views.
The Trust & Assurance shadow control does not score people and blocks personal, special-category, child, biometric and criminal-offence data. Its shadow retention ceiling is 30 days. A separate data-protection assessment is required before any broader processing.