How does ALPANDIA encrypt data in transit and at rest?

In transit: all communications use TLS 1.3. Voice streams use SRTP with DTLS key exchange. API traffic uses TLS 1.3 with certificate pinning available. At rest: all data is encrypted with AES-256-GCM. Encryption keys are managed by ALPANDIA by default or by customer HSM using Bring Your Own Key (BYOK). Key rotation is available on demand.