Security & Compliance

• Zero trust: sandbox every action
• Encryption: TLS in transit, KMS/TDE at rest
• RBAC: admin, auditor, viewer
• Audit: cryptographically signed, immutable
• Compliance: HIPAA/GDPR/SOX templates
• Air-gapped: local policy bundles; offline approvals (outbox)