Security

• Data is encrypted in transit and at rest.
• Production data access is limited to authorised staff and logged.
• Developer access uses authentication and rate limits.
• DNS ownership verification is required before a domain is crawled.

Security reports are acknowledged and confirmed issues addressed. Do not include unrelated personal data or publicly disclose sensitive findings in your report.

Affected people and regulators are notified as required by applicable law.