From Dev.to
Password Reset Email Functionality Under GDPR: Node.js vs Provider-Owned Templates in 2 Flows
Short answer: for GDPR-compliant password reset email functionality, keep the security-sensitive template in Node.js; use a provider-owned template for support-report presentation only when its data,...