OfficePrep encrypts data in transit and at rest, enforces role-based access control and row-level security, logs administrative activity, and retains audit records for seven years.