# Application hosting platform
<a name="app-host-platform"></a>

For your application hosting platform, consider the following possible requirements:
+ Databases encrypted?
+ Encryption keys managed by whom? 
+ All data in-transit and at-rest encrypted?
+ All user access to the system via HTTPS? 
+ All system-to-system interactions approved by your security operations team?