Last updated: July 10, 2026
No system is perfectly secure, and anyone promising otherwise is lying to you. Our approach: reduce the attack surface, build on serious managed platforms, and stay transparent about what is covered by default and what needs a dedicated scope.
Hosting model
kreova.net is a static site served by Vercel over HTTPS. No exposed application server, no database reachable from the pages: the attack surface of a static site is structurally small.
Access control
Access to infrastructure accounts (hosting, database, domain) is limited to the studio. Stored quote requests are readable only by an authenticated session: an anonymous visitor can submit a request, never read anyone else’s.
Secrets and credentials
API keys and credentials live in environment variables, never in versioned code. Sensitive configuration files are excluded from the repository.
Backups
Stored data lives on managed platforms (Supabase) that apply their standard backup mechanisms, according to the subscribed plan. We do not promise restore guarantees beyond what the platform provides; hardened backup needs are scoped in the quote.
Third-party tools
The site relies on Vercel (hosting), Supabase (quote request storage) and Google PageSpeed Insights (SEO tool). Each vendor is responsible for the security of its own infrastructure; we configure our usage along their recommendations.
Maintenance
Site dependencies are updated through regular work cycles. For client projects, ongoing maintenance (updates, monitoring) is covered by a dedicated agreement: without it, the project is delivered as-is at launch.
Incident handling
If an incident affects your data, we inform you quickly by email, fix it as a priority, and document what happened and what changed.
Included by default vs advanced scope
By default, on every project: HTTPS, managed hosting, secret separation, restricted access, walled-off form data.
On quote, as advanced scope: third-party security audits, penetration testing, specific compliance requirements, availability commitments. These need dedicated specialists and are scoped separately.