Start with the business.
Keep sensitive data on secure rails.

This V1 intake captures operating risk and commercial context. SSNs, bank credentials, card data, and identity documents belong in approved provider-hosted secure flows.