How is sensitive data handled?

We handle sensitive data based on the use case and applicable requirements. We minimize what the system can see, separate roles and permissions, protect credentials and logs, and assess encryption, retention, and the vendors involved. For especially sensitive data, dedicated or local infrastructure and human approvals may be appropriate.