Security

Client work runs with least-privilege access, secrets kept out of repositories, dependency scanning, and staged releases with a rollback path. AI features are designed so your data is not used to train a provider model without written consent.

We have not published an ISO 27001 (or similar) claim on this site. If a certification is required for your procurement process, ask on the first call and we will state our current posture honestly.

Legacy modernization can be performed inside your environment so source never leaves it. Chatbot projects agree hosting, retention and model-provider terms before ingest.