Skip to main content
These laws are non-negotiable. Continuous integration fails the build if they are violated.

​
1. No GCLID mixing

Attribution writes must never mix Google Click IDs across unrelated sessions or sources. Every attribution path calls the integrity check before write.

​
2. BigQuery before CRM

BigQuery is the event truth. On every lead action, the platform writes to BigQuery before any CRM side effect. CRM is a projection, not the source of record.

​
3. PII boundary (sha256)

Personally identifiable information is hashed or redacted before it leaves the server on non-allowlisted paths. Raw PII may only leave through explicit, audited delivery paths (for example telephony or CRM delivery) with destination, purpose, and field allowlists.

​
Captive seam (Law 4 in agent rules)

AmFam policyholder data never leaves AmFam systems. Agency systems see lead signals, call signals, hashed identifiers, and bind attestations — not carrier policy, quote, billing, or claim references. See also: Two Environments.