Website and product separation
This marketing website contains public product information and account/evaluation metadata. It is not the UTNIR analysis engine and should not contain proprietary engine source code, customer repositories, semantic rulebooks, or customer analysis artifacts.
Authentication and database access
The reference deployment uses Supabase authentication and PostgreSQL Row Level Security so browser-accessible credentials cannot read arbitrary account records. Each authenticated user is restricted to their own profile and early-access request records.
Public form protection
The reference Cloudflare deployment supports Turnstile verification in a server-side Pages Function before contact requests are written to the database. Secret service credentials remain runtime-only variables and are not embedded into frontend assets.
Transport and headers
The deployment configuration includes HTTPS hosting through Cloudflare Pages and defensive browser headers. Production DNS and email records should be reviewed before switching nameservers.
Responsible disclosure
If you believe you have found a security issue affecting this public website, contact security@utnir.com with sufficient detail to reproduce the issue. Do not access data that is not yours or disrupt service availability.