Infrastructure
- AWS hosting with encrypted storage
- TLS 1.2+ for all traffic
- Backups and redundancy
Access & controls
- Role-based access
- Audit logging on sensitive actions
- Vendor upload links are scoped and expiring
Continuity
- Object lock for uploads
- Immutable audit history of reminders and actions
- Support escalation for urgent expiries