Answers for your security review.

Where data goes, who touches it, and what this site does and does not collect. Written to be read by the person who has to sign off on us, not by someone who already likes us.

Checkable from outside.

Everything in this section can be verified without taking our word for it — run a header scan, open developer tools, read the source.

  1. 01

    No cookies, and no consent banner to click

    This site sets no cookies at all. Both measurement tools are cookieless and set no identifier on your device, which is why there is nothing to consent to.

  2. 02

    Nothing you send is stored here

    Enquiries and job applications are validated, emailed, and dropped. No database, no file storage. A CV is held in memory just long enough to attach it to one email — the safest store is the one that does not exist.

  3. 03

    Served over TLS, with the headers to match

    HSTS with a two-year max-age and preload, a content security policy that permits no foreign script origins, X-Frame-Options DENY, nosniff, a strict referrer policy, and a permissions policy that denies camera, microphone and location outright.

  4. 04

    Fonts and media are served from our own domain

    Loading a page calls no third-party font or asset service, so reading this site does not announce you to anyone else.

  5. 05

    Accessible by design, and measured

    Every page scores 100 on the Lighthouse accessibility audit in both light and dark themes, with zero axe violations — checked on every change, not once at launch.

Everyone who touches it.

The complete list for this website. If we engage with you, any additional processor is named in the contract before work starts.

ProcessorWhyWhereWhat reaches them
VercelHosting, CDN and TLS for praversetech.comGlobal edge network; functions run in the configured regionStandard request data — IP address and user agent at the network layer, as any web host receives. Not retained by us.
Zoho MailOur mailboxes, and delivery of anything you send through a formIndia (smtp.zoho.in / mx.zoho.in)Whatever you typed into the form, plus any CV you attached to an application.
Vercel Speed Insights & Web AnalyticsPage performance and page-view countsVercel infrastructureRoute, referrer, and coarse context such as country, browser and device type. Cookieless, no identifier, no IP address recorded.

The three questions you are going to ask.

These are commitments rather than facts about a website, so they are not published until they are formally agreed internally:

  • Data processing agreement“Will you sign a DPA before we share anything?”
  • Your data is not training anyone else's model“Is our data used to train models we do not own?”
  • Data residency“Can this stay inside India?”

We would rather answer these properly in writing, for your specific engagement, than post a paragraph here that your legal team would have to re-negotiate anyway. Ask us and you get a written answer, not a brochure.

Ask us directly →

Found something? Tell us.

If you believe you have found a security problem in this site or anything we have built, write to inquiry@praversetech.com with enough detail to reproduce it.

We will acknowledge it, tell you what we found, and tell you when it is fixed. We will not threaten you, and we will credit you if you want to be credited. Please give us a reasonable window before publishing, and do not access anyone else’s data while testing.

Praverse Tech Pvt Ltd is registered in India. Our privacy notice is at /privacy and our terms at /terms.