Security

How this system is built

• Calculators run entirely in your browser. Those values never reach our servers.
• Marketing forms are built so they cannot accept government identifiers, account numbers, or documents.
• Applications and documents go through a separate secure system, never through this website or email.
• Network addresses are stored only as a one-way hash of a truncated prefix, used for rate limiting.
• Logs are redacted before they are written; contact details and credentials cannot enter them.
• Access to records is enforced at the database as well as in the application.

Reporting a vulnerability

If you believe you have found a security issue, contact us with the details. We will acknowledge your report and will not pursue action against good-faith research that avoids privacy violations, service disruption, and data destruction.