Security

Report responsibly.

A clear contact channel and an accurate description of the public website's security boundary.

Version 0.9 · 6 September 2026 · effective on public launch

1. Reporting

Report a suspected vulnerability, unauthorised access or data exposure to contact@loginesis.com with the subject “Security”. Do not include patient information, passwords, active tokens or other people's data.

2. Public website

This website is an isolated static Worker with no D1, R2, application secrets, user accounts, forms, ads, analytics or external scripts. Response headers restrict content sources, framing, browser permissions and referrer disclosure.

3. Responsible testing

Do not access other people's data, destroy data, disrupt services or conduct social-engineering tests against users or the operator. No bug-bounty programme has been established.

4. Assurance boundary

We describe implemented controls but do not claim independent security certification. Each application's backend and authentication require separate testing before public launch.

Change history

Version 0.9 — separated product documents, reduced duplication of service-provider details and documented current provider boundaries.