SAMPLE EVIDENCE for DX-04 (made-up app Tidyhaus; not a real review)

Addresses recorded: 41. Sensitive values found: none.
Reset link carries a single-use code (allowed). Invoice links are signed storage URLs that expire after 60 seconds (allowed).