Data Processing & Infrastructure Compliance

Last revised: October 2026

1. Transit Data Encryption (GDPR Art. 32)

All data traversing this edge node is encrypted in transit using TLS 1.2 and TLS 1.3 with Perfect Forward Secrecy (X25519). This node acts strictly as a transient cache and encrypted packet relay; no persistent PII (Personally Identifiable Information) is stored on local NVMe volumes.

2. Network Abuse & Automated Scanning

Unauthorized port scanning, brute-force authentication attempts, or malformed TLS handshakes are automatically logged and mitigated via upstream BGP flowspec rules.