Summarize vendor email risk for compliance claims, subprocessors, retention, DPA language, and breach notifications.