VOL IV · Nº 207FRIDAY · MAY 15 · 20261 FLAG OPEN
The RFPRoom Quarterly
Pinegate Software · published by uStack
· RFPs· Questions· Library· Reviewers· AuditActing as · Nina Vega
RFP-2031 · Security

Q-2031-S02 — How is data encrypted in transit?

Status Approved. Reviewer: Diego Ortega.

← Back to RFP-2031
Approved answer
Approved by Diego Ortega on May 14, 2026 5:56 PM.

TLS 1.3 is enforced on all endpoints; TLS 1.2 is the absolute minimum and only permitted for clients that cannot negotiate 1.3. We use ECDHE key exchange with forward secrecy and modern AEAD cipher suites only. Internal service-to-service traffic uses mTLS with short-lived certificates issued by an internal CA.

Question metadata
Category: Security
Status: Approved
Drafts: 1
Reviews: 1
Draft history (1)
Every authored version, source library link, and the snippet citations attached.
  • v1Approvedmatched LIB-SEC-002May 16, 2026 5:56 PM

    TLS 1.3 is enforced on all endpoints; TLS 1.2 is the absolute minimum and only permitted for clients that cannot negotiate 1.3. We use ECDHE key exchange with forward secrecy and modern AEAD cipher suites only. Internal service-to-service traffic uses mTLS with short-lived certificates issued by an internal CA.

    Rationale: AI-matched against LIB-SEC-002; reviewed verbatim.

Reviewer decisions (1)
Sign-offs and rationale per reviewer.
  • Diego Ortegasecurity_reviewerApprovedMay 13, 2026 5:56 PM

    Verified against trust portal documentation; no changes.

Acting as Nina Vega · VP salesswitch role →