EncryptionAtRestInTransit

Compliance and data-protection baseline: encrypting stored data and data moving over the network.

Why we need this / what value this brings

Without it, a database backup leak or a network intercept exposes raw sensitive data directly.

When to use this

By default, for all sensitive data — this should not be an opt-in decision per feature.

How to use or implement this

Use TLS for all data in transit (should already be the default via your hosting/CDN) and enable at-rest encryption on your database/storage by default.

---

Empty folder — drop notes, links, and findings here as you research.