Security and Trust
This page states only controls verified for the public website candidate. It does not claim a certification, audit, service-level commitment, or product-wide guarantee.
Public website controls
- Static hosting with no public website database, login form, checkout form, analytics, cookies, or browser storage.
- A restrictive Content Security Policy that blocks inline code, forms, connections, framing, and plugins.
- HTTPS preparation, transport-security headers, referrer controls, content-type protection, and restricted browser permissions.
- Invitation requests open the visitor's email application and warn against sending secrets or sensitive data.
- Account and billing links fail closed until approved Platform destinations are configured.
Product boundaries
Each Virtuad application has separate account, privacy, data-processing, availability, and security requirements. Public website controls do not prove that an application or third-party provider has the same architecture.
Report a security concern
Email support@virtuad.ai with a clear description and safe reproduction details. Do not send live credentials, private keys, payment-card data, or unnecessary personal data.