Security & Privacy: per‑tenant keys (KMS); receipts store hashes/masks (no PII); optional transparency‑log anchoring.
Why anchoring matters • EU AI Act mapping