Trust & Security

[TODO: founder fills in security posture, GDPR posture, BaFin status, partner-bank naming, encryption + audit policy. See CONTENT_TODO.md.]