Security

Encryption

HTTPS in transit; encrypted storage for assets at rest.

Access control

Role-based access; least privilege; audit logs.

Backups

Daily backups with tested restores.