> For the complete documentation index, see [llms.txt](https://docs.glesys.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.glesys.com/security/security-measures/cryptography.md).

# Cryptography

Glesys applies cryptographic controls for protecting sensitive information and communications.

### Key elements:

* **Encryption standards:** Data in transit protected using TLS (minimum TLS 1.2+) and sensitive data protected with strong encryption (e.g., AES-256 or equivalent) where applicable.
* **Key management:** Keys are managed securely, rotated at least annually or after suspected compromise, and protected from plaintext storage in code or configurations.
* **Hashing/signatures:** Approved hashing algorithms (e.g., SHA-256+) and prohibition of weak algorithms (e.g., MD5/SHA-1).