Contacts match on normalized email; where email is missing, on name plus company domain plus phone. Accounts match on domain, then on normalized name plus country.
MechanismKeys are tested on a sample first and the false-match rate reviewed with you.