Security & GDPR

What protects your site

• No exposed database server: data lives in a built-in engine with tables encrypted at rest.
• Closed by default: each administration screen has its own right, granted explicitly.
• Injection protection: parameterised queries, escaped output, anti-forgery tokens on every action.
• Signed updates: each package is verified (signature, fingerprint of every file) before being applied, with backup and rollback.
• Hardened sessions and headers: protected cookies, security headers, encryption key that can be placed outside the web folder.
• Logs: logins and update actions are traced.

GDPR

• Fair cookie banner: refusing is as easy as accepting; external content is blocked until the visitor accepts.
• Forms with consent, IP address kept only as a fingerprint, recycle bin and permanent erasure.
• Sample legal pages (notice, privacy, cookies) to complete with your information.