Your Command Center database is encrypted on-device with AES-GCM-256 via the Web Crypto API before persisting to your Cloudflare Worker & KV namespace. Unencrypted civil records, dates, and immigration notes never touch the wire or cloud host.
Derives a 256-bit AES key using PBKDF2 SHA-256 (100,000 iterations).