Trust
Security claims need a defined scope.
Website configuration, product design goals, and independently verified assurances are different things. This page separates them.
Implemented in this website
The Next.js configuration sets headers to block framing, discourage content-type sniffing, restrict camera, microphone, and geolocation access, and limit cross-origin referrer detail. Their presence on a deployed host needs separate checking.
This website has no account login or contact-form delivery endpoint. That limited scope does not establish the security of a separate product or hosting environment.
Product goals, not verified controls
Access boundaries, credential handling, approval gates, recovery, and audit records are intended areas of product design. Implementation coverage and independent assessments are not published here; no certification or compliance claim is made.
Report a concern through the supplied contact methods without including secrets or private customer data. A dedicated disclosure process and response timeline are not yet published.