Appropriate Control/Protocol

Does your organisation secure and encrypt all data transfers using an appropriate control/protocol (for example, SFTP, HTTPS), and are all data transfers subject to review and authorisation?

Yes.

Within Commonplace: Data in transit within the Commonplace environment is all within a Virtual Private Cloud (VPC).

APIs: Data in transit between Commonplace services and External APIs is protected using HTTPS at a minimum of TLS v1.2.