I need to create a SaaS platform that is going to deal with user passwords, files that need to be encrypted, user/company sensitive information and other kinds of secrets. I’m not an expert by any means on this field, but I want to implement the safest solution possible. For this I want to ask if there is any standard, set of recommendations? My biggest concern is with the storage of this kind of information. My idea is to store it on a relational database, encrypted, but I’m open to different approaches. Other resources that you think are relevant to this I will also welcome them!
So if you can provide some kind of material or reference to deal with this I’m much appreciated.