Secured by Supabase. All sessions are encrypted. Data stored in Europe (GDPR compliant). All actions are audit logged.