> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hyperspell.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> An overview of Hyperspell's security features and practices.

## Governance

Hyperspell establishes policies and controls, monitors compliance with those controls, and proves the security and compliance to third-party auditors.

Our policies are based on the following foundational principles:

<Steps>
  <Step title="Least Privilege">Access should be limited to only those with a legitimate business needs, based on the principle of least privilege.</Step>
  <Step title="Consistency">Security controls should be applied consistently across all areas of the enterprise.</Step>
  <Step title="Defense in Depth">Security controls should be implemented and layered according to the principle of defense-in-depth.</Step>
  <Step title="Continuous Improvement">The implementation of controls should be iterative, continuously improving effectiveness and decreasing friction.</Step>
</Steps>

​

## Data Protection

<CardGroup cols={1}>
  <Card title="Data at rest" icon="server">
    All datastores are encrypted at rest. Sensitive resources and tables also use row-level encryption.
  </Card>

  <Card title="Data in transit" icon="network-wired">
    Hyperspell uses TLS 1.3 or higher everywhere data is transmitted over potentially insecure networks.
  </Card>

  <Card title="Data backup" icon="database">
    Hyperspell backs-up all production data using a point-in-time approach. Backups are persisted for 30 days, and are globally replicated for resiliency against regional disasters. For data-residency regions such as the EU, backups remain within that region — see [Regions & Data Residency](/concepts/data-residency).
  </Card>
</CardGroup>

## Operational Security

<CardGroup>
  <Card title="Security education" icon="graduation-cap">
    Hyperspell provides comprehensive security training to all employees upon onboarding and annually.
    Hyperspell's conducts threat briefings with employees to inform them of important security and safety-related updates that require special attention or action.
  </Card>

  <Card title="Identity and access management" icon="id-badge">
    Hyperspell employees are granted access to applications based on their role, and automatically deprovisioned upon termination of their employment. Further access must be approved according to the policies set for each application.

    Multi-factor authentication is required for all employees to access company applications.
  </Card>
</CardGroup>

​

## Responsible Disclosure

To report a vulnerability, please contact us for a [Responsible Disclosure](mailto:hello@hyperspell.com).