SECURITY
Security
A plain-language summary of how data is handled on this site. Magnus is a personal portfolio, and this page describes what is in place today, not a formal security program.
Where data lives
The site runs on Vercel. Account and organization records for the sign-in area are stored in a Supabase Postgres database. Saved assessment results are stored in Upstash Redis. Contact and download form submissions go to HubSpot.
Access to organization data
The database uses row-level security policies so that a signed-in account can only read records tied to its own organization.
Signing in
Sign-in uses a link sent to your email, so there is no password to choose, reuse, or leak. Anyone with access to your inbox can sign in as you, so keep that account secure.
Forms and the chat assistant
Forms and the chat assistant have basic limits on how often the same visitor can send requests. Chat messages are sent to Anthropic to generate replies, so please do not enter sensitive personal or financial information there.
What this page does not claim
This page does not claim any third-party certification or audit, and it does not describe a formal incident-response process.
Reporting a concern
If you think you have found a security problem, please report it through the contact page.