> ## Documentation Index
> Fetch the complete documentation index at: https://docs.microapp.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Overview

> Learn about our data security measures and platform protection.

## Governance

Microapps enforces policies and controls, monitors adherence to these controls, and demonstrates security and compliance to third-party auditors.

Our policies are grounded in the following **core principles**:

<CardGroup cols={2}>
  <Card title="Least Privilege" icon="square-1">
    Access is restricted to individuals with a legitimate business need, following the principle of least privilege.
  </Card>

  <Card title="Consistency" icon="square-2">
    Security controls are consistently applied across all areas of the organization.
  </Card>

  <Card title="Defense in Depth" icon="square-3">
    Security measures are layered and implemented according to the defense-in-depth principle.
  </Card>

  <Card title="Continuous Improvement" icon="square-4">
    Controls are continuously improved to enhance effectiveness and reduce friction.
  </Card>
</CardGroup>

## Data Protection

<CardGroup cols={1}>
  <Card title="Data at Rest" icon="server">
    All data stores are encrypted at rest, with sensitive collections and tables using row-level encryption.
  </Card>

  <Card title="Data in Transit" icon="network-wired">
    Microapp employs TLS 1.3 or higher for all data transmitted over potentially insecure networks.
  </Card>

  <Card title="Data Backup" icon="database">
    Microapp backs up all production data using a point-in-time approach. Backups are retained for 30 days and are globally replicated to ensure resiliency against regional disasters.
  </Card>
</CardGroup>

## Responsible Disclosure

If you think you have found a security vulnerability in Microapp, please refer to our [Responsible Disclosure](/resources/security/responsible-disclosure) page.