# Security and privacy

## Security Measures

1. **Blockchain Technology**:
   * **Immutable Ledger**: All transactions on The Core Terminal are recorded on a decentralized, immutable blockchain ledger, ensuring that records cannot be tampered with or altered retroactively.
   * **Smart Contracts**: Automated and self-executing contracts enforce the terms and conditions agreed upon by parties, reducing the risk of fraud and ensuring compliance without intermediaries.
2. **Encryption**:
   * **Data Encryption**: All data transmitted and stored on The Core Terminal is encrypted using industry-standard encryption protocols. This ensures that sensitive information is protected from unauthorized access and breaches.
   * **End-to-End Encryption**: Communications between users and the platform are secured with end-to-end encryption, ensuring that data remains confidential and secure during transmission.
3. **Authentication and Access Control**:
   * **Multi-Factor Authentication (MFA)**: Users are required to use MFA to access their accounts, adding an extra layer of security by requiring multiple forms of verification.
   * **Role-Based Access Control (RBAC)**: Access to sensitive data and functionalities is restricted based on user roles, ensuring that only authorized personnel can access critical information.

## Privacy Protection

1. **Data Minimization**:
   * **Minimal Data Collection**: The Core Terminal adheres to the principle of data minimization by collecting only the data necessary for providing its services, reducing the risk of data exposure and misuse.
   * **Anonymization**: Personal data is anonymized wherever possible to protect user identities and enhance privacy.
2. **User Control and Consent**:
   * **Informed Consent**: Users are provided with clear information about data collection and processing practices, ensuring that they can give informed consent.
   * **Data Access and Portability**: Users have the right to access their data and request its portability, allowing them to move their data to other platforms if desired.
3. **Compliance with Regulations**:
   * **GDPR Compliance**: The Core Terminal complies with the General Data Protection Regulation (GDPR) and other relevant data protection laws, ensuring that user data is handled in accordance with the highest standards of privacy protection.
   * **Regular Audits**: The platform undergoes regular security and privacy audits to ensure ongoing compliance with regulatory requirements and to identify and address potential vulnerabilities.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.coreterminal.ai/product/security-and-privacy.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.