Nightly check, 3 changes merged since the last check, against the data protection rules in your compliance doc. 2 gaps, 5 rules without a gap.
- Gap: the new export includes email addresses. Rule 4.2 says personal data needs an explicit consent flag. Source: pull request "Add contact export", rules doc section 4.2.
- Gap: the new webhook logs full payloads. Rule 6.1 says logs must not hold customer content. Source: pull request "Webhook retries".
- No gap found: data stays in the EU region, sessions expire after 30 minutes, access changes are logged.
This is a check against your written rules, not a compliance sign off. Nothing is changed or blocked.