Security
Compliance roadmap
Vendor security review
Stripe, Postgres provider, observability vendor.
SOC2 Type I readiness
Controls mapped, evidence collection underway.
Penetration test
Required before public production launch.
Bug bounty
Planned after private beta hardening.