The full read: every flow of personal data checked for whether it is on the map; every purpose checked for a stated, fitting lawful basis; retention checked for whether it commits to a period; and the map read against the systems and product as they actually run, for the flow that exists and is on no row. Three business days from the brief arriving. Not advice, nothing certified, and nothing rewritten.