> ## Documentation Index
> Fetch the complete documentation index at: https://docs.truthlocks.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Architecture

> How Truthlocks secures the platform at the core level.

Security is not an afterthought at Truthlocks. It is ingrained in our development lifecycle, infrastructure, and culture.

### Infrastructure Security

* **AWS Native**: All infrastructure runs on AWS with strict VPC boundaries.
* **Encryption**: Data is encrypted at rest (AES-256 via KMS) and in transit (TLS 1.2+).
* **DDoS Protection**: AWS Shield and WAF protect our edge locations.

### Application Security

* **Tenant Isolation**: Row-Level Security (RLS) guarantees data segregation at the database level.
* **Authentication**: Multi-factor authentication (MFA) enforcement for all administrative access.
* **SDLC**: All code changes undergo automated static analysis, peer review, and integration testing.

### Penetration Testing

We engage independent third-party firms to conduct penetration testing annually. Summary reports are available upon request for Enterprise customers.