> ## Documentation Index
> Fetch the complete documentation index at: https://docs.elevatedsignals.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & hosting

> Hosting model, data segregation, and security posture.

## Hosting model

Invariant is a **multi-tenant cloud** application — the same architecture used by the leading
life-sciences eQMS vendors. Your organization's data is logically isolated from every other tenant.

## Data segregation

Isolation is enforced by org-scoped queries **plus a database row-level-security backstop**, so a
missing scope cannot leak cross-tenant data. See
[Multi-tenant data segregation](/invariant/compliance/multi-tenant-data-segregation).

## Security posture

* Encryption in transit and at rest
* Role-based access control with organization scoping
* Tamper-evident, hash-chained audit trail
* SOC 2 / ISO 27001 posture — *status per the Supplier Qualification summary (in progress).*

*Backup, recovery, DR, RPO/RTO, and data residency details: to be finalized with ES infrastructure.*