Security
Security & trust
Security is part of how we build and operate. This page summarizes our infrastructure posture, contact-form protections, and how we handle lead data.
Infrastructure
Our website and related services run on Cloudflare — Workers for compute, D1 for structured data, R2 for object storage, and Pages for static and SSR delivery. Edge-first hosting reduces attack surface and keeps systems close to users.
Contact form protections
Contact submissions are protected with CSRF double-submit cookies, origin validation, per-IP rate limits, and optional Cloudflare Turnstile when configured. Requests that fail these checks are rejected.
Lead data
Contact leads are retained only as long as needed to respond to inquiries. Cloudflare acts as a subprocessor for hosting and storage. We do not sell personal data.
DPA & security questionnaires
Need a data processing agreement or security questionnaire for vendor review? Email us and we will follow up with the appropriate materials.
Last updated: July 2026