Legal and trust foundation for EU customers. Users can request a machine-readable export of their profile, posts, comments, votes, subscriptions, tickets, and notification preferences. Admins can export organisation data for compliance. Deletion flow supports self-service account deletion plus admin-assisted data erasure with confirmation and audit logging.

Requirements: asynchronous export job table, signed short-lived download URLs, deletion preview showing what will be removed/anonymised, retention policy hooks for billing/support audit data, and clear distinction between deleting content vs anonymising authorship where shared team records must remain. Integrates with the audit log card and account settings.