Public controls
Verified against the current website implementation and privacy notice.
PublishedOverview
Security information, grounded in the current system.
This Trust Center separates controls observable in the current Coryntas website from controls configured for a specific customer deployment. It does not present unverified assurance claims.
Assurance
Clear status before the review begins.
Deployment assurance
Scoped to the customer workflow, systems, data, and operating model.
Reviewed per deploymentThird-party certifications
No third-party certification is currently published in this Trust Center.
Not currently publishedResources
Start with the source.
Public resources
Coryntas Privacy Statement
How Coryntas collects, uses, discloses, retains, and protects personal information.Public resources
Security and governance
How permissions, action boundaries, approvals, evidence, and human oversight are designed into agent workflows.Public resources
Security review preparation
The workflow Coryntas uses to gather approved evidence, surface gaps, and route exceptions for review.Controls
Separate what is implemented from what is configured.
Website infrastructure
→- Encrypted transport enforced
- Website hosting and delivery
- Business enquiry storage
Form and application security
→- Registered submission origins
- Automated abuse detection
- Request validation and size limits
Data and privacy
→- Optional analytics requires consent
- Public request retention is bounded
- Short-lived verification challenges
Agent governance
→- Permission-aware context
- Scoped actions
- Approval policy
Deployment assurance
→- Hosting boundary review
- Retention requirements review
- Change and evaluation path
Subprocessors
Current website providers.
Vercel
Website hosting and delivery
Hostinger
Business enquiry email delivery
Cloudflare
Partner application abuse prevention
Resend
Partner application email delivery
Google Analytics 4
Optional website analytics
Updates
Trust Center activity.
Infrastructure and privacy
Website providers and business enquiry handling updated
Updated the website provider list for Vercel hosting and Console business enquiry handling: PostgreSQL storage, self-hosted ALTCHA verification, and internal notifications through Hostinger SMTP. Partner applications continue to use Cloudflare Turnstile and Resend.
Need more detail?
Bring the questions from your security review.
Coryntas will scope the response to the deployment, systems, and data your organization is evaluating.