What gets sent, in which language, and what must never appear in one.
No passwords, no full card numbers, no account numbers in full, and no links to a domain that is not ours. A message that could be copied by a fraudster is a message we do not send.
Every template exists in all eight site languages, and a missing translation blocks a release rather than quietly falling back.