Privacy-first automation for portal work

Three decisions to write down once: what access the automation gets, what data may leave the portal, and what ends up in the logs.