Privacy & GDPR
Authenticated users with privacy:export can call GET /privacy/export. Erasure uses POST /privacy/erasure-request (blocked under legal hold). Retention defaults from tenant settings (30–3650 days). Prefer eu-central-1 for EU personal data.
Help articles never claim live Peppol connectivity from the sandbox.