# Operations

Run HelixIAM in production: keys, branding, access control, privacy, observability and recovery.

- [Realm settings](realm-settings.md) · [Realm keys](realm-keys.md) · [Key custody (HSM / KMS)](key-custody.md) · [Key custody plugins](custody-plugins.md) · [Admin roles (RBAC)](admin-roles.md)
- [Login theming](theming.md) · [Notifications](notifications.md) · [GDPR & privacy](gdpr.md)
- [Observability & health](observability.md) · [High availability](high-availability.md) · [Data retention](data-retention.md)
- [Backup & disaster recovery](backup.md) · [Upgrades & migrations](upgrades.md) · [Upgrading from rc.13 to 1.1.0-rc.1](upgrade-rc13-1.1.0-rc1.md) · [Upgrading from 1.1.0-rc.1 to 1.1.0-rc.2](upgrade-1.1.0-rc1-rc2.md) · [Upgrading from 1.1.0-rc.13 to 1.1.0-rc.14](upgrade-1.1.0-rc13-rc14.md)
- [Security hardening](security.md)
- [Hosting municipalities (runbook)](municipality-hosting.md): one realm per gemeente, onboarding, day-2, offboarding