Security
How we handle what's entrusted to us.
Last updated October 17, 2026
How we handle data
Client operational data stays inside the systems we build for that client. We don't sell data, share it across clients, or use one client's records to benefit another. Access is limited to the people doing the work.
How this site handles submissions
Consultation-form submissions are stored in our own database and emailed to the founder. They are never published, sold, or shared. Ask us to delete a submission and it's deleted.
How our systems are built
Credentials and keys live server-side only and never ship to browsers. Every system we operate has backups, health checks, and a documented path back to a known state. Changes are previewed before they run and reversible after they do.
What we don't claim
We don't hold SOC 2 or ISO certifications today, and we won't imply otherwise. What we offer instead is specificity: this page exists, it's dated, and every practice described above is one we can demonstrate in the systems themselves.
Report a problem
If you've found a security issue in anything we operate, tell us through the consultation form — it goes directly to the founder and is treated as urgent.