Secure Development Policy

This document describes how Marta designs, builds, reviews, tests, deploys, and maintains software securely. It covers Marta’s secure software development lifecycle, secure coding expectations, source control and code review practices, secrets management, dependency and supply chain security, vulnerability remediation, environment separation, release controls, and post-release monitoring. This is a public version intended for customers, prospects, auditors, and partners. Detailed internal repository settings, CI/CD configuration, security findings, architecture diagrams, detection logic, and sensitive operational procedures are intentionally omitted.