>

We earn trust by being accountable

How we secure your data, respect your privacy, and stay on the hook for the systems we build and run for you.

>

How we protect your data

Security is built into how we work, not bolted on at the end.

01

Encryption

Data is encrypted in transit with TLS and at rest using strong, current standards. Your information is protected both as it moves and where it sits.

02

Access control

We grant access on a least-privilege basis, scoped to the people and systems that need it. Credentials are rotated and access is revoked promptly when it is no longer needed.

03

Infrastructure

We run on established cloud providers with hardened, isolated environments. We do not stand up untested infrastructure to hold your data.

04

Vulnerability handling

We keep dependencies patched and review changes before they ship. Reported issues are triaged on a clear timeline based on severity.

05

Backups

Critical data and configurations are backed up on a regular schedule and tested for recovery. A failure or mistake does not mean lost work.

>

Your data, your rights

You stay in control of what is yours. We are a custodian, not an owner.

01

Data ownership

Your data is yours. We process it to deliver the service and never sell it or use it to train models for anyone else.

02

Privacy posture

We align our practices with GDPR principles, including lawful basis, data minimization, and respecting individual rights. Privacy is a default, not an upgrade.

03

Subprocessors

We keep a current list of the third parties we rely on and what each one handles. You can review it before you commit.

04

DPA availability

A data processing agreement is available for clients who need one. We sign the terms that put our obligations in writing.

05

Retention and deletion

We retain data only as long as the service requires or you direct. On request, we delete your data and confirm it is gone.

06

AI-crawler policy

We publish an llms.txt and honor crawler directives so you control how AI systems access your content. Visibility stays a choice you make.

>

Staying on the hook

A system you cannot trust to run is not finished. We stand behind what we ship.

01

Uptime posture

We design for high availability and run production systems on resilient infrastructure. Your agents and sites are built to stay up.

02

Monitoring

We watch the systems we run with alerting on errors, latency, and failures. Problems reach us before they reach your customers.

03

Human in the loop

Agents operate inside guardrails and escalate to a person on anything sensitive or uncertain. Automation does not mean unsupervised.

04

Audit logging

Key actions are logged so there is a clear record of what happened and when. You can see what a system did on your behalf.

05

Incident response

We have a defined process to contain, fix, and communicate when something goes wrong. You hear from us directly, not from a status page alone.

06

No lock-in

You own your accounts, data, and content. If you leave, you keep everything and we hand it over cleanly.

>

About trust and security

No. Your data is used to deliver your service and nothing else. We do not sell it and we do not use it to train models for other clients.

Yes to both. We provide a data processing agreement and a current list of subprocessors so your legal and security teams can review before signing.

You keep what is yours. We return or delete your data on request and confirm deletion. There is no lock-in holding it hostage.

We contain it, fix the cause, and notify you directly with what happened and what we did. Our process is defined before anything goes wrong, not improvised after.

>

The non-negotiables.

01

Proof over promises

We show our work, our scores, and our reasoning. The site itself is the argument.

02

Restraint is the flex

One accent, one action, nothing competing. The discipline is what makes it premium.

03

Speed is a feature

Performance is not a tradeoff against beauty. We refuse to ship a site that janks.

04

You own everything

Your design, your code, your content. The retainer keeps it sharp, never hostage.

Bring your security questions

Send your security review, your DPA, or your toughest questions. We answer plainly and put the important parts in writing.