Security

• Encrypted transport (TLS) everywhere: every Cuesoft property is HTTPS-only.
• Edge protection and origin controls: our APIs answer only requests that arrive through our edge security layer; requests that bypass it are rejected.
• Least-privilege access: form records and infrastructure are accessible only to the people who need them for their role, and access is revocable per engagement.
• Two-factor authentication is mandatory on company systems.
• No credentials in chat: secrets move through a secret manager, never through messaging platforms, per our public cybersecurity policy.
• A binding internal policy: everyone who works with us is bound by the data-protection policy in the company handbook.

No internet transmission is guaranteed 100% secure; we commit to prompt, lawful handling if something goes wrong: see breach notification.