Imagine Arjun, a security engineer working at a fintech startup, receives a compliance mandate: “All customer invoices must be retained for …