## Network Security

All communication between the SDK Connector and Sanas Cloud uses SIP for connection establishment and RTP for audio streaming. See [Sanas Cloud deployment](https://developer.sanas.ai/Docs/Deployment/Sanas-Cloud) for firewall and network configuration details.

## Encrypted Audio Transmission

Enable encrypted media transport by setting `secureMedia = True` during SDK initialization. All audio is encrypted in transit between the SDK Connector and Sanas Cloud.

```
init_params.secureMedia = True
```

## Encryption & Access Control

### Encryption

AES-256 encryption at rest. TLS encryption in transit.

### Access Control

Role-based access control using least-privilege principles.

## Infrastructure

Hosted on AWS with ISO 27001 certified data centers. Daily backups across multiple availability zones.

## Monitoring

24/7 automated infrastructure monitoring.

For certifications, data residency, sub-processors, and retention policies, see [Compliance & Data Residency](https://developer.sanas.ai/Docs/Enterprise/Compliance-and-Data-Residency).
