Security is part of the build: access control, secure infrastructure, and practices aligned with standards such as HIPAA and GDPR when the project requires them.