Encryption
Data is encrypted in transit with TLS and at rest using strong, current standards. Your information is protected both as it moves and where it sits.
>
How we secure your data, respect your privacy, and stay on the hook for the systems we build and run for you.
>
Security is built into how we work, not bolted on at the end.
Data is encrypted in transit with TLS and at rest using strong, current standards. Your information is protected both as it moves and where it sits.
We grant access on a least-privilege basis, scoped to the people and systems that need it. Credentials are rotated and access is revoked promptly when it is no longer needed.
We run on established cloud providers with hardened, isolated environments. We do not stand up untested infrastructure to hold your data.
We keep dependencies patched and review changes before they ship. Reported issues are triaged on a clear timeline based on severity.
Critical data and configurations are backed up on a regular schedule and tested for recovery. A failure or mistake does not mean lost work.
>
You stay in control of what is yours. We are a custodian, not an owner.
Your data is yours. We process it to deliver the service and never sell it or use it to train models for anyone else.
We align our practices with GDPR principles, including lawful basis, data minimization, and respecting individual rights. Privacy is a default, not an upgrade.
We keep a current list of the third parties we rely on and what each one handles. You can review it before you commit.
A data processing agreement is available for clients who need one. We sign the terms that put our obligations in writing.
We retain data only as long as the service requires or you direct. On request, we delete your data and confirm it is gone.
We publish an llms.txt and honor crawler directives so you control how AI systems access your content. Visibility stays a choice you make.
>
A system you cannot trust to run is not finished. We stand behind what we ship.
We design for high availability and run production systems on resilient infrastructure. Your agents and sites are built to stay up.
We watch the systems we run with alerting on errors, latency, and failures. Problems reach us before they reach your customers.
Agents operate inside guardrails and escalate to a person on anything sensitive or uncertain. Automation does not mean unsupervised.
Key actions are logged so there is a clear record of what happened and when. You can see what a system did on your behalf.
We have a defined process to contain, fix, and communicate when something goes wrong. You hear from us directly, not from a status page alone.
You own your accounts, data, and content. If you leave, you keep everything and we hand it over cleanly.
>
No. Your data is used to deliver your service and nothing else. We do not sell it and we do not use it to train models for other clients.
Yes to both. We provide a data processing agreement and a current list of subprocessors so your legal and security teams can review before signing.
You keep what is yours. We return or delete your data on request and confirm deletion. There is no lock-in holding it hostage.
We contain it, fix the cause, and notify you directly with what happened and what we did. Our process is defined before anything goes wrong, not improvised after.
>
We show our work, our scores, and our reasoning. The site itself is the argument.
One accent, one action, nothing competing. The discipline is what makes it premium.
Performance is not a tradeoff against beauty. We refuse to ship a site that janks.
Your design, your code, your content. The retainer keeps it sharp, never hostage.
Send your security review, your DPA, or your toughest questions. We answer plainly and put the important parts in writing.