> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aicord.cloud/llms.txt
> Use this file to discover all available pages before exploring further.

# Safety security

# <img src="https://mintcdn.com/lipedevv/MuqSig17BRwFcVpd/icons/security.svg?fit=max&auto=format&n=MuqSig17BRwFcVpd&q=85&s=168172216de3d98946c204dfff5aa665" alt="Security icon" width="22" data-path="icons/security.svg" /> Safety and Security

Security baseline for operating and selling AiCordCloud.

## API key handling

* Never commit API keys to Git
* Use a secrets manager in production
* Rotate tenant keys on schedule

## Access control

* Restrict panel and server access with least privilege
* Restrict management commands to owner/admin users

## Runtime guardrails

* Request timeouts
* Per-tenant rate limits
* Queue and backpressure controls

## Logging policy

* Log status code, latency, tier, upstream route
* Never log full secrets
* Keep timelines for postmortems