> For the complete documentation index, see [llms.txt](https://metya.gitbook.io/metya/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://metya.gitbook.io/metya/security-and-compliance/data-security-and-privacy.md). # Data security & privacy Domain separation (compliance vs. business). At‑rest AES‑256; in‑transit TLS 1.2/1.3; row‑level encryption; KMS/HSM rotation. RBAC/ABAC least privilege; all access logged; immutable audit logs; Merkle‑anchored reconciliation batches. {% hint style="danger" %} CSIRT and RACI with 72h privacy breach notifications. {% endhint %}