Data egress

risk

Any data that leaves the customer's environment for a vendor's systems: shipped logs, telemetry sent to a third-party model API, even licence heartbeats or aggregate usage metrics. Security reviews ask precisely what egresses. A trustworthy vendor answers in writing, unprompted, including anything small, because being caught understating egress once ends the relationship.