Data minimization
Customer addresses, lock photographs, authorization records, and contact details are sensitive. Production collection remains disabled until secure storage, access controls, retention periods, and deletion procedures are configured. Permanent smart-lock access codes must not be submitted.