[tasklist] feat: data security

[xiaohanyu]

Description

Data security is one of our most concerns for a robust and trustworthy SaaS product. We would like to invest more on data security to make sure that our users data is secure and never got leaky.

[Optional] Possible solutions

NA

Acceptance Criteria

• user data should be kept in a secure manner and no leaky is allowed.

Todo list

- [ ] spike: data security best practices
- [ ] feat: database encryption at rest

[xiaohanyu]

Some refs for database encryption at rest:

• https://www.digitalocean.com/community/tutorials/how-to-encrypt-a-database-at-rest-in-postgresql-on-ubuntu
• https://docs.digitalocean.com/products/databases/postgresql/how-to/secure/
• https://www.enterprisedb.com/blog/everything-need-know-postgres-data-encryption