Security and confidentiality

The site uses encrypted HTTPS connections and infrastructure services that help mitigate abusive traffic. The form validates input, limits attempts, and keeps the email-provider credentials in the server environment.

These measures reduce risk but cannot promise absolute security. We investigate and remediate reasonably verified vulnerabilities according to their impact.

Client information is used to assess or perform the agreed service. Where needed, the parties may sign a confidentiality agreement and define who can access repositories, designs, data, and environments.

We will not publish a client project, logo, result, or testimonial as a case study without the relevant authorization.

Specialist audits, penetration testing, managed backups, high availability, and certifications are not presumed to be included; they must be stated in the proposal.

Clients must protect their accounts, use appropriate authentication, provide lawful content, communicate access changes, and keep the services they manage up to date. Passwords must not be sent through the public form.

For a confirmed incident under our control, we will seek to contain it, document it, correct its cause, and notify affected people or clients where required by risk, contract, or applicable law.

Suspected vulnerabilities may be reported through the contact email without exploiting the issue, accessing other people’s data, or disrupting the service.

Providers are selected according to service needs, while each remains responsible for its own infrastructure. This policy may change as safeguards, risks, or providers evolve.