# Security Packet Checklist

- Data inventory and minimisation statement
- Architecture and UAE hosting location
- Encryption, access control, audit log, backup and restore evidence
- Vulnerability/dependency process and incident contacts
- Subprocessors and deletion proof
- Synthetic-data test evidence; no production data in demos