Skip to main content

Security & Compliance Space

Purpose: Document authentication policies, role-based access control (RBAC), data protection compliance, threat modeling, and security policies for Learnille.

📂 Navigation & Directory Structure​

🔐 Access Control​

  • RBAC & JWT Architecture - Role-Based Access Control (RBAC), CASL permission guards, JWT access/refresh token specifications, and endpoint security.

🛡 Data Protection & Compliance​

  • Data Privacy & Compliance - PII data protection, GDPR/NDPR compliance, data retention, and field-level encryption standards.

📋 Security Policies​

  • Platform Security Policy - Password policies, rate-limiting rules, secret management guidelines, and API token lifecycle.

🎯 Threat Models​

  • System Threat Model - Comprehensive threat vector analysis, OWASP Top 10 mitigations, and attack surface defense strategies.