Processing lawfulness clarity
If privacy policy wording conflicts with heroic landing copy—that inconsistency deserves skepticism.
Retention must be enumerated
Transcripts versus aggregates versus diagnostic logs merit distinct TTLs.
Overclaim remediation
"Always detects grooming" promises require reproducible adjudicated evaluations—not vibes.
Ingestion envelopes
Offline-first coercion or burner ephemeral accounts dodge most technical surveillance eventually.
References to verify
Ask for privacy policy version dates, subprocessors list, and deletion SLAs in writing—not slide decks alone.
When vendors deflect
If answers stay vague after written requests, treat marketing claims as unverified.
References
Compare monitoring limits and regional law orientation.
Limitations
This checklist is educational—not due diligence on your behalf.