We perform quarterly access reviews of all team members with access to sensitive systems.

We follow the principle of least privilege with respect to identity and access management.