Security
Encryption in transit and at rest, restricted access, continuous monitoring and layered defences.
- TLS 1.2+ on every customer-facing endpoint
- AES-256 encryption at rest
- Production access is role-based, MFA-required and audit-logged
- TOTP two-factor authentication on every account
- Continuous monitoring with request-ID correlated logs
- High-severity dependency CVEs patched within 7 days