> For the complete documentation index, see [llms.txt](https://ganjes-organization.gitbook.io/ganjes-white-paper/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ganjes-organization.gitbook.io/ganjes-white-paper/dapp-v1/security-module/data-security-and-privacy.md).

# Data Security and Privacy

1. Encryption at Rest:
   * AES-256 encryption for all sensitive data stored in databases
   * Secure key management using Hardware Security Modules (HSMs)
2. Data Anonymization:
   * Pseudonymization of personal data where full anonymity isn't possible
   * Data minimization practices to collect only necessary information
3. Access Control:
   * Role-Based Access Control (RBAC) for granular permissions management
   * Principle of least privilege applied to all system accounts and user roles
4. Secure Data Deletion:
   * Implemented "right to be forgotten" with secure data wiping techniques
   * Regular data purging of unnecessary historical data
5. Secure Enclaves:
   * Utilization of secure enclaves (e.g., Intel SGX) for processing highly sensitive data
   * Confidential computing techniques to protect data in use