Security & Compliance
PCI DSS L1, GDPR, encryption/KMS, zero‑trust, audit trail
Controls
- End‑to‑end encryption; key rotation with KMS
- Zero‑trust network; mTLS between services
- Secrets management & least‑privilege IAM
- Audit trails and tamper‑evident logs
Compliance
PCI DSS L1
GDPR
ISO27001 (roadmap)
SOC2 (roadmap)