{
  "title": "Security practices",
  "status": "published",
  "last_updated": "2026-08-31",
  "controls": [
    "encryption in transit and at rest",
    "tenant isolation and row-level controls",
    "role-based access",
    "audit events",
    "capability and release gates"
  ],
  "certification_claims": [],
  "note": "Independent certifications are listed only after attainment and publication."
}