01
Security Overview
High-level website security, access, secrets, backups, vulnerability reporting and delivery tooling.
TRUST CENTRE
Trust should be inspectable before a client signs a contract.
A clear place for buyers, security teams and procurement reviewers to understand website data handling, engagement access, specialist delivery and responsible AI principles.
Trust architecture.
PRIVACYCollect only what is needed.
SECURITYProtect website and delivery systems.
ACCESSRole-based, minimum necessary and removable.
RESPONSIBLE AIAuthorized data use with human oversight.
TRANSPARENCYDisclose providers, locations and limitations.
What buyers can inspect.
02
Privacy Notice
Legal entity, data categories, purposes, providers, transfers, retention and rights, reviewed for applicable jurisdictions.
03
Responsible AI Principles
Data use, human oversight, risk review and client-authorization commitments.
04
Subprocessor Statement
Current website, CRM and service providers with purposes and relevant processing locations where required.
05
Data Handling & Global Delivery
How delivery location, access, confidentiality and residency requirements are agreed.
06
Security Contact
A monitored channel and process for responsible vulnerability reporting.
Additional evidence when verified.
Qualified buyers can request additional vendor evidence such as insurance confirmation, verified certifications, independent assessment summaries or security documentation when those materials actually exist and are approved for disclosure.
NEXT STEP
Give procurement a clear path to validation.
For qualified opportunities, provide a controlled vendor-review package instead of publishing sensitive internal details.