Security, privacy, compliance and data retention