Security & reliability
What sits behind your site, and how we look after it.
Hosting
Sites are hosted on a global content delivery network, which means your pages are served from a location near the visitor rather than from a single machine. There is no shared server to be slowed down by someone else's traffic, and no server software sitting there waiting to be patched.
Encryption
Every site we host is served over HTTPS with a certificate that renews automatically. Anything a patient types into a form is encrypted in transit. If a certificate ever failed to renew we would know before you did — uptime monitoring covers it.
Backups
Every version of your site is retained. If a change causes a problem, we can roll back to a previous version in under a minute rather than rebuilding anything.
Uptime monitoring
Your site is checked continuously. If it stops responding we are alerted automatically and start work immediately, including outside business hours. You should not be the one telling us your site is down.
Forms and patient information
An honest word about HIPAA
A standard website contact form is not the right place for protected health information, and we design accordingly: our forms ask for a name, a way to reach you and a short message, not clinical detail.
If your practice needs a form that collects information subject to HIPAA — intake paperwork, symptom detail, anything clinical — that belongs in a system built for it, under a business associate agreement, and we will connect your site to one rather than pretending a contact form is sufficient.
We are a website company, not a HIPAA-covered entity. We say so plainly because plenty of vendors are vague about it.
Accessibility
Every site is built toward WCAG 2.1 Level AA — proper contrast, labelled forms, keyboard navigation and image descriptions. More detail is on our accessibility statement.
Access and handover
Your domain and your site belong to you. We hold the access needed to do our job and nothing more, and we will hand over hosting credentials whenever you ask, without making it difficult.
What we don't claim
No host can promise a site will never go down, and anyone who does is overselling. What we can promise is that it is monitored, backed up, and that a real person starts work the moment something breaks.