Trust & security

How we protect this website and the information you share with us, and how to tell us about a security problem.

This website

How this website protects you

We hold our own website to the standards we help clients reach.

Encrypted connections

Every page is served over HTTPS, and browsers are told to always use a secure connection.

Strict browser protection

A strict content security policy, clickjacking protection and no scripts from other sites, except Cloudflare's "are you human" check on the contact form when it is turned on.

Protected forms

The contact form is protected against forged submissions, automated spam and repeated sending.

No tracking

No advertising, analytics or tracking cookies. Read about cookies.

Your information

What happens to what you send us

We collect only what we need to answer you, and we delete it on a schedule.

  • Contact form enquiriesEmailed to our team and kept for up to 12 months, then deleted automatically.
  • Technical logsStandard server logs used to run and secure the site.
  • Never soldWe do not sell your personal information.
Read the privacy policy
How we build

Security is part of the work, not a final check

Security by design

Threat modelling, scanning and quality gates are part of how we build, not added at the end.

Automated checks

Automated testing, CI/CD and security checks are how we work every day.

Least data needed

We design software to collect and keep as little personal information as the job requires.

Report a vulnerability

Found a security problem? Tell us.

If you believe you've found a security weakness in this website or in software built by VeViCore, we want to hear about it.

Email a security report

Machine-readable details: /.well-known/security.txt

Please include

  • What you found and where (page address or system)
  • Steps to reproduce it
  • What an attacker could do with it

Please don't

  • Access, change or delete other people's information
  • Run tests that could slow down or interrupt the site, or send spam through our forms
  • Share the problem publicly before we've had a reasonable chance to fix it

We'll confirm we've received your report and keep you updated while we fix it.

Find out if we can help.

Tell us what you're building or what's slowing you down. You'll speak with a founder, and get an honest answer, even if it's "we're not the right fit".