Security posture: TLS 1.2+ in transit, AES-256 at rest, role-based access control, full audit trail, encrypted nightly backups, GDPR/UK GDPR, SOC 2 in progress.