# Security Operations

### Scope

Security operations covers the day-to-day practices that keep the platform safe and available.

This page is the umbrella for:

* [Malware Protection](https://docs.taloflow.ai/security/security-operations/malware-protection)
* [Incident Response](https://docs.taloflow.ai/security/security-operations/incident-response)
* [Disaster Recovery](https://docs.taloflow.ai/security/security-operations/disaster-recovery)
* [Availability & Continuity](https://docs.taloflow.ai/security/security-operations/availability-and-continuity)
* [Physical Security](https://docs.taloflow.ai/security/security-operations/physical-security)

### Key areas

#### Monitoring and auditability

Taloflow logs authentication and API activity for traceability. Retention and backup schedules are documented in [Logs, Audit Logs, and Backups](https://docs.taloflow.ai/security/platform-controls/logs-audit-logs-and-backups).

#### Malware and supply-chain controls

We use layered controls across repositories, developer environments, and CI/CD. Details are in [Malware Protection](https://docs.taloflow.ai/security/security-operations/malware-protection).

#### Incident response

We follow a defined incident response process for detection, containment, recovery, and communication. See [Incident Response](https://docs.taloflow.ai/security/security-operations/incident-response).

#### Disaster recovery and business continuity

We maintain backup and restore procedures and test recovery paths. See [Disaster Recovery](https://docs.taloflow.ai/security/security-operations/disaster-recovery) and [Availability & Continuity](https://docs.taloflow.ai/security/security-operations/availability-and-continuity).

#### Physical security

Physical security is handled by our infrastructure providers and their data center partners. See [Physical Security](https://docs.taloflow.ai/security/security-operations/physical-security).

### Security contact

Send security questionnaires and document requests through the [Support Hub](https://docs.taloflow.ai/security/broken-reference).