Public controls
Verified against the current website implementation and privacy notice.
PublishedOverview
Security information, grounded in the current system.
This Trust Center separates controls observable in the current Coryntas website from controls configured for a specific customer deployment. It does not present unverified assurance claims.
Assurance
Clear status before the review begins.
Deployment assurance
Scoped to the customer workflow, systems, data, and operating model.
Reviewed per deploymentThird-party certifications
No third-party certification is currently published in this Trust Center.
Not currently publishedResources
Start with the source.
Public resources
Coryntas Privacy Statement
How Coryntas collects, uses, discloses, retains, and protects personal information.Public resources
Security design overview
How permissions, action boundaries, approvals, evidence, and human oversight are designed into agent workflows.Public resources
Security and data boundaries
Questions and responsibilities to review when defining access, data handling, and controls for your deployment.Controls
Separate what is implemented from what is configured.
Current website controls
Controls used by the public website and its enquiry services.
Website infrastructure
→- Encrypted transport enforcedImplemented
- Website hosting and deliveryImplemented
- Business enquiry storageImplemented
Form and application security
→- Registered submission originsImplemented
- Automated abuse detectionImplemented
- Request validation and size limitsImplemented
Data and privacy
→- Optional analytics requires consentImplemented
- Public request retention is boundedImplemented
- Short-lived verification challengesImplemented
Customer deployment controls
Controls configured for the workflow, systems, and data being deployed.
Agent governance
→- Permission-aware contextConfigured per deployment
- Scoped actionsConfigured per deployment
- Approval policyConfigured per deployment
Deployment assurance
→- Hosting boundary reviewConfigured per deployment
- Retention requirements reviewConfigured per deployment
- Change and evaluation pathConfigured per deployment
Subprocessors
Current website providers.
Vercel
Website hosting and delivery
Hostinger
Business enquiry email delivery
Cloudflare
Partner application abuse prevention
Resend
Partner application email delivery
Google Analytics 4
Optional website analytics
Updates
Trust Center activity.
Infrastructure and privacy
Website providers and business enquiry handling updated
Updated the website provider list for Vercel hosting and Console business enquiry handling: PostgreSQL storage, self-hosted ALTCHA verification, and internal notifications through Hostinger SMTP. Partner applications continue to use Cloudflare Turnstile and Resend.
Need more detail?
Bring the questions from your security review.
Coryntas will scope the response to the deployment, systems, and data your organization is evaluating.