Security & Compliance FedRAMP, NIST 800-53, SOC2, HIPAA, GDPR. RLS + pgvector, provider policy (Vertex primary).