Security & compliance Role-based access, MFA enforced on control plane Backups encrypted at rest Privacy-first operations and audit logging