What to send
- selected service: Security Review, AI Governance, EU AI Act, or NIS2
- company type, employee band, and responsible owner
- product/system scope and current pressure
- deadline and evidence transfer method
- sensitive-data flag and external LLM processing permission; default no