BRIGHTWIREHow we keep your systems and data safe
The practices we follow on every website, portal and integration we build and support.
Client data protection
Our sites and portals run on Cloudflare's global network, and every connection is encrypted with TLS (HTTPS only). API keys and passwords are stored as encrypted secrets, never in source code. Access follows least privilege: each system and person gets only the access the job requires.
Two-step sign-in on admin tools
Admin dashboards and CRMs require two-step verification before anyone can view or change client data.
Backups
We take a backup of the site and its data before every change, alongside regular scheduled backups, so any change can be rolled back quickly.
Spam and bot protection
Public forms are protected with Cloudflare Turnstile, hidden honeypot fields, signed timing checks and rate limits, so bots and junk submissions stay out of your inbox and CRM.
Change and deploy process
Every change is deployed to a private preview first and checked there. Nothing goes to production until the owner approves it, and each release is verified live afterward.
Incident response
If we suspect a security issue, we contain it, investigate, restore from backup where needed, and tell affected clients promptly with what happened and what we changed. Report a concern any time at [email protected].
Security partners
Partnerships with leading security vendors are in progress. We'll list them here once they're finalized.
Insurance
Insured: general liability, cyber, and professional liability (E&O) coverage through our parent company, Zoe Ophelia Holdings LLC.
Responsible disclosure
Found a vulnerability in one of our sites or systems? Email [email protected] with the details. Please give us reasonable time to fix it before sharing it publicly, and don't access or change data that isn't yours. We'll acknowledge your report and keep you updated.
Questions about security?
We're happy to walk your team through how we work.