This repository was archived by the owner on Nov 13, 2025. It is now read-only.

Name		Name	Last commit message	Last commit date
parent directory ..
ANALYST_EXPORT_GUIDE.md		ANALYST_EXPORT_GUIDE.md
CLI_TECHNICAL_REFERENCE.md		CLI_TECHNICAL_REFERENCE.md
EMAIL_EXPORT_SECURITY_ASSESSMENT.md		EMAIL_EXPORT_SECURITY_ASSESSMENT.md
ENCRYPTION_GUIDE.md		ENCRYPTION_GUIDE.md
EXPORT_RISK_ANALYSIS.md		EXPORT_RISK_ANALYSIS.md
KMS_KEY_MANAGEMENT.md		KMS_KEY_MANAGEMENT.md
LAMBDA_DEPLOYMENT_GUIDE.md		LAMBDA_DEPLOYMENT_GUIDE.md
LAMBDA_EXPORT_SUMMARY.md		LAMBDA_EXPORT_SUMMARY.md
LAMBDA_WALKTHROUGH.md		LAMBDA_WALKTHROUGH.md
PII_SAFETY_AWS_GUIDE.md		PII_SAFETY_AWS_GUIDE.md
QUICK_COMPARISON.md		QUICK_COMPARISON.md
README.md		README.md
SECURITY_AUDIT.md		SECURITY_AUDIT.md

README.md

Security Documentation

This folder contains security-related documentation for the DOL-MCNJ application.

Quick Start

For a fresh start migration from Mailchimp:

Follow ../deployment/ENCRYPTED_SIGNUP_DEPLOYMENT.md for complete deployment steps
Review ENCRYPTION_GUIDE.md for technical details
Reference KMS_KEY_MANAGEMENT.md for AWS setup

Documentation Files

Core Security Guides

ENCRYPTION_GUIDE.md - Encryption implementation overview
PII_SAFETY_AWS_GUIDE.md - PII safety measures and logging
KMS_KEY_MANAGEMENT.md - AWS KMS setup and management

Deployment

../deployment/ENCRYPTED_SIGNUP_DEPLOYMENT.md - Complete deployment guide

Key Features

Always Encrypted: All signup emails are encrypted by default
Fresh Start: No legacy data migration needed
PII Safe: All logging and error handling protects sensitive data
AWS KMS: Enterprise-grade key management
Search Capable: Encrypted data with searchable hashes for duplicates