What to send
- customer questionnaire, vendor review, procurement request, or buyer due-diligence packet received
- buyer/customer context and response deadline
- product/system in scope and existing material available
- evidence transfer method and named owner for answer confirmation
- sensitive-data flag and external LLM processing permission; default no