Payment privacy

CCA stores invoice, payment status, receipt, consent, and safe payment-method metadata needed to operate receivables. Sensitive card and bank credentials remain in provider-hosted fields.

Security and rate-limit records store keyed hashes instead of raw IP or email values.