Foundations Data encrypted in transit (HTTPS/TLS) Data encrypted at rest in cloud hosting Customer data separated by organisation (tenant separation) Role-based access controls
Operational controls Audit logging of key actions (logins, changes, exports, admin actions) Hosting on Microsoft Azure Responsible handling and confidentiality commitments Clear data export and deletion pathways