# Official sources

Use this reference only when grounding IONOS Cloud security controls, compliance posture, or IAM behavior.

## IONOS Cloud security and compliance documentation

Use these as starting points, not as proof of the user's live IONOS security state:

- https://docs.ionos.com/cloud/security — security controls, compliance certifications, and GDPR documentation
- https://docs.ionos.com/cloud/identity-and-access-management — IAM role design, bearer token scope, and access control reference
- https://api.ionos.com/docs/ — API authentication patterns and authorization scope reference
- https://docs.ionos.com/cloud/ — platform-level compliance certifications and regional availability

## Grounding rule

Official IONOS documentation describes platform security capabilities and compliance certifications. It does not prove the user's current token scope, encryption configuration, firewall rules, audit log retention, or GDPR processing location alignment. Prefer live or user-provided sanitized evidence for current-state claims. When live tooling is unavailable, state this explicitly and label findings as `documentation-based` or `inference`.
