Privacy posture
- minimum necessary sharing
- consent before routing private data
- no hidden capture
- no passive surveillance
- no raw therapy notes in proof receipts
Trust center
Safe, clear, consent-first continuity.
The Human Code is built around identity continuity, role-scoped access, proof-safe records, and user-controlled sharing.
Security posture
- security headers
- HTTPS hardening
- role-scoped routes
- audit-ready workflow model
- production path through Supabase Auth
Professional boundary
- not a law firm
- not a medical provider
- not a court
- organizes user-provided information
- users control submissions
Domain trust checklist
- valid SSL for apex and www
- privacy and terms pages visible
- security contact available
- FortiGuard re-rating request submitted if blocked
- canonical domain selected