QUESTION 02
How is customer data encrypted at rest and in transit?
SUPPORTEDDRAFT ANSWER
Based on security_policy.md: Data at rest is encrypted with AES-256, and data in transit is encrypted with TLS 1.2 or higher.
SOURCE EXCERPTS
security_policy.md: "Data at rest is encrypted with AES-256, and data in transit is encrypted with TLS 1.2 or higher."
QUESTION 06
Do you use quantum-resistant encryption for all stored customer data?
CANDIDATEDRAFT ANSWER
Answer left blank for human review
SOURCE EXCERPTS
Zur Prüfung (der Zusammenhang zwischen Aussage und Frage ist nicht belegt): security_policy.md: "Data at rest is encrypted with AES-256, and data in transit is encrypted with TLS 1.2 or higher."
QUESTION 08
How often do you commission external penetration tests of the production platform?
GAPDRAFT ANSWER
Answer left blank for human review
SOURCE EXCERPTS
No supporting evidence found in approved documents.
QUESTION 04
For how long are security logs from production systems retained?
CONTRADICTIONDRAFT ANSWER
Answer left blank for human review
SOURCE EXCERPTS
operations_handbook.md: "Security logs from production systems are retained for 30 days according to the operations handbook."
security_policy.md: "Security logs from production systems are retained for 90 days and reviewed weekly."