Encryption
Every record is encrypted at rest under its namespace’s key, and every connection is encrypted in transit.
Satisfies
| Criterion | Text |
|---|---|
| SOC2 CC6.1 | The entity implements logical access security software, infrastructure and architectures over protected information assets. |
| SOC2 CC6.7 | The entity restricts the transmission, movement and removal of information to authorized parties, and protects it in transit. |
| ISO27001 A.8.24 | Rules for the effective use of cryptography, including key management, are defined and implemented. |
| HIPAA 164.312(e)(1) | Technical measures guard against unauthorized access to protected health information sent over a network. |
| GDPR Art.32 | Controllers and processors implement security appropriate to the risk, including encryption, resilience and regular testing. |
Implemented by
Test
| Step | Rule |
|---|---|
| Kind | Preventive: it stops the failure before it happens. |
| Select | Every storage location and every endpoint, scanned daily. |
| Assert | None holds plaintext records, and none accepts an unencrypted or deprecated-cipher connection. |
Owner
Security Engineer, Engineering Team.
Example
A tutoring marketplace's records sit under its own namespace key. A client offering an old cipher is refused at the handshake, and no backup holds plaintext.