Security & reliability

Security is an input.
Not an afterthought.

Decisions about access, data and auditing are made when the system is designed. Retrofitting them costs more and never ends well.

When the system is designed

What gets decided
at the start.

01 / 03
Access control (RLS)
Permissions enforced in the database, not only in the application. Someone who should not see another dealer's order will not see it through the API either.
02 / 03
Change audit log
Who changed what, and when — traceable after the fact. Without it, an argument about the numbers is settled by whoever remembers best.
03 / 03
GDPR by design
The scope of personal data and how long it is kept are settled in the design, not at audit time.
On this site

What runs today.

You can check all of this yourself, without taking our word for it.

01 / 03
Security headers
CSP, X-Frame-Options DENY, HSTS and nosniff. Verifiable from outside, without our permission.
02 / 03
Form protection
Turnstile and submission rate limiting. The enquiry form is not an open channel for anyone.
03 / 03
MFA on our own accounts
Two-factor sign-in on the accounts through which anything of yours could be reached.

Privacy policy