Access and authority
Role definitions, authentication, permissions, approvals, and segregation of duties.
Control starts with knowing what the marketing website does—and does not—collect.
This public website is separate from any client delivery environment. Do not submit case documents or confidential policy information here.
A limited public information surface.
The marketing site does not provide a client portal and should never receive trust documents or policy-specific confidential information.
Website data
Standard hosting logs may process technical request information. We use Google Analytics and Ahrefs Web Analytics to understand how the website is used. We do not display advertising on this site.
Inquiry data
Inquiries submitted through the website are transmitted over HTTPS, stored in our database hosted by Supabase, and delivered to our team by email through Resend. Do not include confidential case information.
Hosting
The website source is maintained in a private repository and the site is delivered through Vercel infrastructure over HTTPS.
Contracted services require environment-specific diligence.
Security statements for a contracted or customer-specific delivery environment are limited to controls that are implemented and supportable.
Information lifecycle
Collection, storage, encryption, retention, deletion, and subprocessor flows.
Operations
Monitoring, incident processes, recovery, continuity, change control, and evidence.
AI governance
Permitted uses, review requirements, data handling, evaluation, and production-change controls.