Privacy by design: tenant isolation, audit logs, retention rules, and visible live/recording indicators.