Undefined post-deletion retention cap for non-biometric data ('Other Information' retained indefinitely per business-interest claim with no contractual timeline). Multi-jurisdiction legal governance (California law for Rest-of-World customers effective 2026-07-20) with 12-month liability cap increases dispute risk relative to single English-law baseline.

Request written data retention schedules for all non-biometric data categories at contract signature; escalate post-deletion handling to legal review before production use. For Rest-of-World deployments, negotiate California-law jurisdiction carve-outs into Enterprise MSA or document vendor's insurance and indemnification scope in writing to offset multi-jurisdiction complexity.