A conservative posture, plainly stated.

The site and its database run on managed cloud infrastructure operated under a data-processing agreement, with automated backups, point-in-time recovery and row-level access control. The production region is European Union. Backups are encrypted and held in the same region.

Data belongs to a single logical tenant scoped to this project. Row-Level Security policies restrict every read and write to the intended role; the anonymous public key cannot read submissions.

Traffic is served over TLS 1.2+ end-to-end. Data at rest is encrypted by the platform provider using AES-256.

Access to production data is limited to named partners. Authentication uses managed identity with MFA. Administrative actions are logged.

We do not train third-party AI models on client data. Any AI features we use on this site are limited to drafting and translation of our own copy; they never process unpublished client information. Client-engagement AI runs under separate contracts with named human review — described in each proposal.

The categories of processor we rely on — hosting and database, transactional email and cookieless audience measurement — are listed in the privacy notice. A named subprocessor list is provided to clients on request under NDA.

If you believe you have found a security issue, please write to contact@stredgepartners.co with the subject line SECURITY. We acknowledge reports within one working day and do not pursue researchers acting in good faith.

For a suspected data incident involving personal data, contact@stredgepartners.co. Notifications follow Art. 33 and Art. 34 GDPR timelines.

See the privacy notice for lawful basis, retention and your rights.