Legal
Privacy Policy
Last updated: July 2026
1. Submitted contact information
When you submit a form on this website, we collect the information you provide, such as your name, email address, company, and message. We use this information to respond to your inquiry and to communicate about a requested assessment. We do not sell contact information or use it for unrelated marketing without your consent.
2. Application assessment inquiries
Assessment requests include details about your application, such as its name, URL, type, development stage, intended users, data sensitivity, and repository size. We use this information solely to evaluate scope, recommend an assurance level, and prepare a proposal. Inquiry details are shared only with the personnel involved in scoping your request.
3. Repository information
If an assessment proceeds, access to source repositories is arranged under a separate written agreement, using time-limited, read-only credentials. Repository contents are handled under the confidentiality terms of that agreement, not this website policy. We do not request repository access through this website’s forms, and you should not submit credentials or source code through them.
4. Confidential technical materials
Architecture documents, deployment details, and similar technical materials shared during an assessment are treated as confidential, restricted to the assigned review team, and retained only as needed to support the verification decision and any published record. Public verification records never include source code or confidential technical detail.
5. Analytics
This website may use privacy-respecting analytics to understand aggregate site usage, such as page views and referring pages. We do not use analytics to build individual profiles. If analytics are enabled, we favor tools that do not require cookies or cross-site tracking.
6. Cookies
This website does not require cookies for its core function. If cookies are introduced — for example, to support a future verification-registry login — this policy will be updated to describe what they store and why.
7. Data retention
We retain contact form submissions and assessment inquiries for as long as needed to handle the inquiry and any resulting engagement, and then for a reasonable business-records period. You may request deletion of your inquiry data at any time using the contact email below.
8. Service providers
This website is hosted on Netlify, and form submissions are processed through Netlify Forms. Service providers process data on our behalf under their own security and privacy commitments. We do not share your information with third parties beyond the providers needed to operate this website and respond to you.
9. Contact and requests
To ask a question about this policy, request a copy of the information we hold about you, or request deletion, contact [email protected]. We will respond to reasonable requests within a reasonable timeframe.