- Per-user memory architecture - Handling GDPR-style 'delete-my-data' features - Scoping contextual memory (session, long-term)