Information and trust

Security and data

Site controls, query and proposal protection, and principles applicable to provider integrations.

Communication and forms

The website uses HTTPS. The forms validate fields on the server, limit sizes and frequency, and verify each submission. Confirmation depends on an actual write to the database.

Administrative access

Reading and managing requests requires authentication and administrative permissions on the server. Changes require security checks from the superadmin and maintain history with author and date. Private responses are not cached publicly.

Minimization

The contact requests communication and context data. You do not use these forms to receive identification documentation or credentials. Abuse protection uses limited technical data and references to avoid duplicates.

Integrations and responsibilities

Each integration must define credential protection, permissions, data separation, validation of notifications and incidents. An internal approval, return screen, or repeat request is not a substitute for confirmation from the provider.

Report an incident

Check the domain and use contact to report a problem. Don't share private keys, recovery phrases, or authentication codes.