# Security Overview
We take security seriously.
- All traffic is served over HTTPS/TLS.
- Passwords are hashed by our authentication provider.
- Messages between clients and freelancers are encrypted at rest.
- Access to the admin control center requires a shared PIN plus an
individually-authenticated staff account.
- Sensitive actions (payouts, verifications, wallet approvals) require two
different staff members to approve.
- Every administrative action is written to an immutable audit log.
