Rental-operations-platform/docs/phase14/DATA_FLOW_INVENTORY_v1.0.csv

1	Field	Purpose	Required	Source	Browser_processing	Server_processing	External_recipients	Storage_location	Retention	Deletion_path	Consent_or_legal_basis	Logging	Analytics	Owner	Open_issue
2	fullName	Identify requester	Yes	User form/current locale	DOM memory only; client validation	strict validation and normalization	None	None	Request lifetime only	Automatic discard	Unapproved for production	Prohibited	Prohibited	Sales Ops + Legal	P9-002; P9-003
3	workEmail	Follow-up address	Yes	User form/current locale	DOM memory only; client validation	lowercase and practical validation	None	None	Request lifetime only	Automatic discard	Unapproved for production	Prohibited	Prohibited	Sales Ops + Legal	P9-002; P9-003
4	company	Qualify organization	Yes	User form/current locale	DOM memory only; client validation	strict validation and normalization	None	None	Request lifetime only	Automatic discard	Unapproved for production	Prohibited	Prohibited	Sales Ops	P9-002
5	fleetSize	Approved qualification	Yes	User form/current locale	DOM memory only; client validation	enum validation	None	None	Request lifetime only	Automatic discard	Unapproved for production	Prohibited	Prohibited	Sales Ops	P9-002
6	market	Optional market context	No	User form/current locale	DOM memory only; client validation	trim and length limit	None	None	Request lifetime only	Automatic discard	Unapproved for production	Prohibited	Prohibited	Sales Ops + Legal	P9-013
7	preferredLanguage	Demo language preference	No	User form/current locale	DOM memory only; client validation	enum validation	None	None	Request lifetime only	Automatic discard	Unapproved for production	Prohibited	Prohibited	Sales Ops	P9-002
8	message	Optional demo focus	No	User form/current locale	DOM memory only; client validation	trim and 1000-character limit	None	None	Request lifetime only	Automatic discard	Unapproved for production	Prohibited	Prohibited	Sales Ops + Legal	P9-002; P9-003
9	idempotencyKey	Transport deduplication	Yes	Browser UUID	memory only	bounded local result coalescing	None	process memory	900 seconds default	TTL/process restart	Necessary technical processing; production policy pending	Not logged	Prohibited	Engineering	P14-004
10	source	CTA entry point	Yes	Application allowlist	event detail	enum validation	None	None	request lifetime	automatic	Operational context	Category only if approved	Allowlisted after consent	Product + Analytics	P9-004
11	correlationId	Privacy-safe error correlation	Generated	Server UUID	failure response only	generated per attempt	None	None currently	None	automatic	Necessary diagnostics	Allowed without payload if observability approved	Prohibited	Engineering	P14-005