# Infrastructure Security While our data minimization strategy reduces risk, we apply rigorous security standards to the data we do retain. Our infrastructure is built on enterprise-grade cloud providers with physical security controls that meet ISO 27001 standards. #### Encryption Everywhere Data security is maintained through ubiquitous encryption. * In Transit: All data transmission between the user's browser, your servers, and the Signet ingestion network is encrypted using TLS 1.3. We enforce strict HSTS policies to prevent protocol downgrade attacks. * At Rest: All data stored in our databases is encrypted at rest using AES-256 standards. Key management is handled through a centralized, audit-logged Key Management Service. #### DDoS Mitigation and Uptime Analytics infrastructure is mission-critical. If your analytics script hangs, your website hangs. To prevent this, Signet is deployed on a global edge network. This distributed architecture acts as a natural shield against Distributed Denial of Service attacks. Traffic is load-balanced across hundreds of points of presence. If one region comes under attack or suffers an outage, traffic is instantly rerouted to the nearest healthy node, ensuring 99.99 percent uptime availability. #### Access Control Internally, we practice the principle of least privilege. Access to production data is restricted to a small subset of engineering staff required for maintenance. All access is logged, audited, and requires multi-factor authentication. We do not allow third-party contractors or unvetted personnel to access the production data environment. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.signtoken.vip/5.-security-and-compliance/infrastructure-security.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.