Security
Careful with your data, your access, your brand.
Security isn't a page we bolt on — it's how we build. Here's how we protect your project, your visitors, and the access you trust us with.
Encrypted by default
Every site we ship is served over HTTPS with SSL/TLS. Traffic between your visitors and the site is encrypted, end to end.
Careful data handling
We collect only what a project needs, store it in reputable providers, and never sell or share your data. Secrets live in environment variables, never in code.
Least-privilege access
We request the minimum access to do the job, use scoped credentials, and remove access when an engagement ends. Sensitive access is handed back at handover.
GDPR-aware process
We build with privacy in mind — clear consent, minimal collection, and data-subject rights respected. We help you meet your obligations to your visitors.
Backups & recovery
Code lives in version control; content and databases are backed up so a mistake or outage is recoverable, not a catastrophe.
Secure delivery
Deployed on Vercel with modern platform protections. Dependencies are kept current, and we monitor for known vulnerabilities.
Have a specific security or compliance requirement? Tell us what you need and we'll walk you through how we'd meet it.
Have a security question?
Ask us anything about how we handle credentials, data and access on your project.
