Trust / Public posture

Our own security posture, published.

What this website handles, what product-security information is public, and what remains unavailable are stated separately.

Published now

Website data handling

  • The current site has no account, authentication or file-upload surface.
  • The demo form sends your request to us by email; nothing else on the site collects personal data.
  • The theme preference is stored in browser local storage, not in a cookie.
  • The site uses no advertising or analytics integration.
  • A public vulnerability-disclosure route and security.txt are available.

On request

Product and operational controls

  • Deployment and network architecture
  • Encryption, isolation and access-control implementation
  • Product retention and deletion schedules
  • Hosting regions, residency commitments and subprocessors
  • Audit reports, certifications, support and incident-notification commitments

Disclosure

Do not infer a control from its absence or from a marketing phrase.

We publish a control only once it has an accountable owner, implementation detail and a review date. For anything listed under “On request”, ask us.