Security

The website runs on Amazon Web Services in the United States, in managed containers behind the Amazon CloudFront network. Infrastructure is defined as code and every change is deployed through an automated pipeline rather than by hand.

All traffic is served over HTTPS with TLS 1.2 or newer. Requests made over plain HTTP are redirected to HTTPS before any content is sent.

• The private administration area requires a password and uses a signed, HTTP-only session cookie.
• Access to form submissions and analytics is limited to authorized Genius Lab staff.
• Database credentials and application secrets are kept in AWS Secrets Manager and injected at runtime, never stored in source code.
• Deployments authenticate to AWS with short-lived credentials instead of long-lived access keys.

The best protection for data is not collecting it. Our site analytics use no cookies and never store IP addresses, and the Contact Sales form asks only for what we need to reply. Details are in our Privacy Policy.

The Genius Platform is fully managed by Genius Lab, and each implementation is designed around the client’s systems, access requirements, and governance. Security, confidentiality, and data-handling commitments for client data are set out in each client agreement. To review our security practices as part of an evaluation, contact our team.

If you believe you have found a security issue on this site, please tell us through the Contact Sales form with “Security report” in your message, and do not access or change data that is not yours. We review every report and will follow up with you.