Review builder

Appendix packs

Turning a pack on can add rows and can promote items via rules in the manifest.

• Regulated health / clinical-ish

  Enable when: PHI, BAAs, HIPAA-style obligations, or clinical adjacent workflows.

  reg_health

• Payments / PCI scope

  Enable when: cards, bank debits, stored payment methods, or merchant-of-record flows.

  payments_pci

• Kids / schools

  Enable when: under-13, school rosters, FERPA/COPPA-style workflows.

  edu_child

• Government / procurement rigor

  Enable when: public sector, formal security questionnaires, stronger audit evidence.

  gov_procurement

• Marketplace / multi-tenant B2B

  Enable when: multiple orgs, delegated admins, cross-tenant isolation concerns.

  marketplace_multi_tenant

• UGC / community / abuse-prone

  Enable when: posts, chat, uploads, public profiles, moderation workflows.

  ugc_social

• Realtime collaboration

  Enable when: presence, co-editing, sustained WebSockets, fan-out.

  realtime_collab

• Offline-first / field

  Enable when: IndexedDB/service worker sync, unreliable networks, technicians in the field.

  offline_field

• Data residency / transfers

  Enable when: region locks, cross-border transfers, sovereign/tribal data commitments.

  data_residency

• High-security enterprise IT

  Enable when: SAML/SSO mandates, SCIM, IP allowlists, strict admin separation.

  high_sec_enterprise

• AI / ML user-facing

  Enable when: LLM features, automated decisions, prompt injection risk, model change management.

  ai_product

• Ads / attribution

  Enable when: pixels, remarketing, affiliate measurement, marketing consent complexity.

  ads_measurement

• Streaming / DRM / licensed media

  Enable when: premium video/audio, geoblocked rights, entitlement services.

  media_rights

• Commerce operations (beyond payments)

  Enable when: inventory, tax, shipping, subscriptions, QBO-style accounting sync.

  commerce_ops