> ## Documentation Index
> Fetch the complete documentation index at: https://ihub.learnille.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & Compliance Space

> Migrated from the previous Learnille internal documentation hub

**Purpose:** Document authentication policies, role-based access control (RBAC), data protection compliance, threat modeling, and security policies for **Learnille**.

***

## 📂 Navigation & Directory Structure

### 🔐 [Access Control](https://ihub.learnille.com/security-and-compliance/access-control-docs/rbac-and-jwt.md)

* [RBAC & JWT Architecture](https://ihub.learnille.com/security-and-compliance/access-control-docs/rbac-and-jwt.md) - Role-Based Access Control (RBAC), CASL permission guards, JWT access/refresh token specifications, and endpoint security.

### 🛡 [Data Protection & Compliance](https://ihub.learnille.com/security-and-compliance/data-protection-and-compliance/data-privacy.md)

* [Data Privacy & Compliance](https://ihub.learnille.com/security-and-compliance/data-protection-and-compliance/data-privacy.md) - PII data protection, GDPR/NDPR compliance, data retention, and field-level encryption standards.

### 📋 [Security Policies](https://ihub.learnille.com/security-and-compliance/security-policies/security-policy.md)

* [Platform Security Policy](https://ihub.learnille.com/security-and-compliance/security-policies/security-policy.md) - Password policies, rate-limiting rules, secret management guidelines, and API token lifecycle.

### 🎯 [Threat Models](https://ihub.learnille.com/security-and-compliance/threat-models/threat-model.md)

* [System Threat Model](https://ihub.learnille.com/security-and-compliance/threat-models/threat-model.md) - Comprehensive threat vector analysis, OWASP Top 10 mitigations, and attack surface defense strategies.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.