professional.dfg · governed analytics
No role touches raw personal data. Aggregate-only egress · k-anonymity enforced.