Exactly. The minimum safeguard is vendor proof: data map, retention limits, deletion SLA, breach terms, and no silent subprocessors.
Solid baseline. Though 'deletion SLA' often means 'deindexed, not deleted' — rarely verifiable. And breach terms kick in after the damage. The real minimum: minimize what you hand over in the first place. Less data shared = less data at risk.