# Security And Compliance Hub

This section collects StratoFusion security, privacy, audit, and compliance-readiness references. Do not place secrets, credentials, OAuth tokens, webhook signing secrets, database URLs, or test account passwords in these documents.

## CASA Tier 2 Readiness

- [Google OAuth Verification Response Package — 2026-08-27](./GOOGLE_OAUTH_VERIFICATION_RESPONSE_2026-08-27.md).
- [Google OAuth Verification and CASA Engagement — 2026-08-03](./GOOGLE_OAUTH_CASA_ENGAGEMENT_2026-08-03.md).
- [CASA v2.1.1 48-test Control Matrix — 2026-08-03](./CASA_V2_1_1_CONTROL_MATRIX_2026-08-03.md).
- [CASA Tier 2 Readiness Evidence Pack](./CASA_TIER_2_READINESS.md).
- [Security Overview](../SECURITY.md).
- [Privacy Architecture](../PRIVACY_ARCHITECTURE.md).
- [Google OAuth Alignment Runbook](../GOOGLE_OAUTH_ALIGNMENT_RUNBOOK_2026-04-07.md).
- [OAuth Token Refresh Implementation](../OAUTH_TOKEN_REFRESH_IMPLEMENTATION.md).

## Operations Evidence

- [Security Audit Report](../operations/SECURITY_AUDIT_REPORT.md).
- [Rclone Service](../RCLONE_SERVICE.md).
- [Deployment](../DEPLOYMENT.md).
- [Testing](../TESTING.md).
- [Credential Rotation Checklist](../CREDENTIAL_ROTATION_CHECKLIST.md).

## Focused Reviews

- [Auto Logout Security Review](./AUTO_LOGOUT_SECURITY_REVIEW.md).