Map which account, voice, movement, room-map, and payment data the product collects, where each is stored, and which vendors can access it. If children may use the service, review whether its audience and features bring child-privacy rules into play.[3]
For an arcade, demo, or training venue, document customer access, supervision, equipment setup, staff roles, and emergency procedures. Ask the broker how the venue and hosted-service exposures are described without assuming either one determines policy response.[1]