Working language and country
Both are validated against the canonical registries rather than accepted as free text, so an organization cannot be configured into a language the product does not ship or a country the platform cannot resolve.
Retention policies
Policies are per data class and carry a disposition, a retention period and a legal basis. Eligibility compares times, not strings — a same-day record is never mistaken for an expired one, and the dry run and the execution use an identical predicate.
Governed actions
High-impact actions require an approval obtained through the approval workflow by a separate person with decision authority. Placing a legal hold, releasing one, and executing an erasure are three separately governed actions.