Information security

1. Website protection

• Mandatory encrypted HTTPS (TLS) with HSTS.
• Content Security Policy (CSP) that only allows code from authorized origins.
• Protection against clickjacking, content-type sniffing and information leaks in headers.
• Static site with no database or admin panel exposed on arkit3d.com.

2. Protecting your data and projects

• Briefs, projects and files are stored on the Snuube platform, encrypted in transit and at rest.
• Role-based access: each client only sees their own projects; only authorized ARKIT3D staff can access the panel.
• Passwordless portal access: a one-time link sent to your email, with anti-bot verification.
• Forms with server-side validation, per-IP rate limits and honeypot fields against spam.
• Backups managed by the database provider.

3. Internal practices

• Keys and credentials are never stored in code and are rotated periodically.
• Security review before each release and up-to-date dependencies.
• Least-privilege access for staff and providers.

4. Reporting a vulnerability

If you find a security issue, please report it responsibly via WhatsApp +1 809-563-7565 before making it public. Do not try to access third-party data or disrupt the service. We appreciate and answer every good-faith report.

5. Incidents

If an incident affects your personal data, we will notify affected people and the competent authorities within the deadlines required by applicable law.