> For the complete documentation index, see [llms.txt](https://sestra.gitbook.io/sestra-whitepaper/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://sestra.gitbook.io/sestra-whitepaper/operating-and-environment/env-and-security-boundaries.md).

# ENV & Security Boundaries

## Environment Separation

Sestra environments are isolated. Common environments:

* sandbox
* staging
* production

Sessions and policies do not cross environments.

***

## Security Boundaries

Sestra focuses on access decisions only. It does not:

* execute code
* inspect payloads
* store secrets for clients

Clear boundaries improve security.

***

## Audit Perspective

From an audit point of view:

* Sestra stores minimal data
* sessions are temporary
* no personal data is handled

Audits focus on configuration and access flow, not user data handling.