Security by design
Security assurance software should handle context carefully, keep access explicit and preserve meaningful accountability.
Data minimisation
Collect, use and retain only what is needed for a defined purpose.
Access control
Align access with roles, responsibilities and least privilege.
Auditability
Make reviews, decisions, exceptions and action traceable.
Resilient operations
Plan for dependable service, recovery and improvement.
This website
The public site is statically generated and served with restrictive security headers. Optional analytics remain off unless identifiers are configured and a visitor grants analytics consent.
Report a concern
Please use the established private security channel described in the repository security policy. Do not include secrets or sensitive customer information in an initial report.
No certifications or compliance attestations are claimed on this website.