Design stage and program close. Independent review validating applicable data-protection posture, audit logs, attestation artifacts, and compliance documentation prior to investor and regulator disclosure. Engaged twice, at design stage and at the close of the program.