Contract: Company data encryption

Status

Draft.

Purpose

This contract defines the minimum data-at-rest protection expectations for BooksPlus company data.

Contract

BooksPlus company data should be protected against casual file copying, backup leakage, and unintended plaintext exposure.

Rules

• Company data storage must be documented.
• Sensitive company data should not be stored casually in plaintext files.
• Encryption keys must not be hard-coded in the application.
• Local keys should be protected by operating system secure storage where practical.
• Recovery behavior must be documented.
• Backup encryption must be supported.

Acceptance criteria

• A copied company database or backup is not casually usable without authorization or key material.
• Key handling is documented.
• Backup files are encrypted or otherwise protected.
• Exporting decrypted company data requires authorization and audit logging.