Compliance & Security

May 18, 2026 · View on GitHub

This section maps regulatory requirements to NornicDB controls and procedures.

Start Here

GDPR requirements and workflows: gdpr-compliance.md
HIPAA controls and operational mapping: hipaa-compliance.md
SOC2 control coverage: soc2-compliance.md
Encryption controls: encryption.md
Audit evidence and logging posture: audit-logging.md
Background workers and MVCC for auditors: background-workers-mvcc-audit-guide.md
RBAC/compliance access model: rbac.md

Control Domains

Data protection and crypto: encryption.md
Access control: rbac.md
Auditability and retention: audit-logging.md
Background processing and version history: background-workers-mvcc-audit-guide.md

Standards Mapping

Runtime security controls: ../security/README.md
Production operations and runbooks: ../operations/README.md
Symptom-based routing: ../issues-index.md