Maintain good cloud and application security practices — access control, multi-factor authentication, secrets management, API credentials, encryption, firewall/security configuration, dependency and vulnerability monitoring, security updates, logging, production access management, backup security. Because the platform handles insurance claim and customer information, security and data protection must be treated as core operational requirements