Trust & Security

Your data is protected

Security is built into how we run this site and handle your information — here's a clear summary of our practices.

Encryption in transit

All traffic is served over HTTPS/TLS, with HSTS enforced so connections are always encrypted.

Secure infrastructure

Data is stored on Google Firebase / Google Cloud, which maintains SOC 2, ISO 27001, and other leading compliance certifications.

Access controls

Content and lead data are protected by strict database rules — only authenticated administrators can read or modify them.

Hardened headers

We ship a Content-Security-Policy plus anti-clickjacking, MIME-sniffing, and referrer protections on every response.

Abuse & bot protection

Form submissions are validated and rate-limited, with honeypot and App Check defenses against spam and automated abuse.

Ongoing monitoring

Dependencies and configurations are reviewed regularly, and infrastructure is kept patched and up to date.

Report a vulnerability

If you believe you've found a security issue, we'd like to hear from you. Please email us and we'll respond promptly.

hello