{"id":5,"title":"Security","slug":"security","content":"<div class=\"legal-container\"><h1>Security</h1><p>Last updated: August 2026</p><h2>Encryption</h2><ul><li>All data in transit: TLS 1.2 or higher</li><li>Data at rest: AES-256 encryption</li><li>PDF/A-3 reports: cryptographically sealed at point of generation</li></ul><h2>Access Control</h2><ul><li>Mandatory two-factor authentication (TOTP) for all users</li><li>Role-based access control (RBAC) across four tiers</li><li>Session timeout enforced automatically</li><li>Full audit log of all authentication and data events</li></ul><h2>Regulatory Compliance</h2><p>Causara is designed to meet FDA 21 CFR Part 11, EU GMP Annex 11, UK GDPR, and NIS2 requirements.</p><h2>Report a Vulnerability</h2><p>Contact <a href=\"mailto:security@causara.io\">security@causara.io</a></p></div>","meta_description":null}