# Governance

Set the policies that determine who and what can access Altertable. Start with access control and principals, then review how data and credentials are protected.

- [Access control](/docs/governance/access-control.md): Manage organization, environment, and catalog access for team members, service accounts, and production vs staging workspaces.
- [Principals](/docs/governance/principals.md): Manage Altertable principals for people and automation so access to organizations, environments, and data stays governed.
- [Encryption](/docs/governance/encryption.md): Encrypts data in transit and at rest, including credentials for databases and connected object storage buckets.