Company / privacy

Website data handling, stated plainly.

This notice describes the current website implementation. It does not ask visitors to place controlled or sensitive information into a public intake path.

Business intake

Name, work email, organization, organization type, optional role/title and phone, system problem, stage, timing, and source page are stored to review and respond to the inquiry.

Career interest

Name, email, optional location and profile links, discipline, experience narrative, optional work preference and timing, selected U.S. Government security-clearance status, and any optional resume are stored for recruiting review. Resume files are held in private object storage.

Abuse prevention

Turnstile verification, a honeypot, submission timing, same-origin checks, bounded request size, and rate limiting are used. IP address and user-agent values are hashed before being stored with a submission.

Storage boundary

Current website submissions are written by Cloudflare server-side functions to the site’s Cloudflare D1 database. Public browser code does not receive database credentials.

What is not requested

The careers form does not request clearance identifiers, sponsoring agency, compartments, program details, polygraph information, classified project names, or proof documents.

Sensitive material

Do not submit classified, export-controlled, regulated, security-sensitive, proprietary customer material, credentials, financial records, medical data, or other information that requires a controlled channel.

Retention and data requests

Retention periods and formal request procedures are governed by the company’s internal policy. This page does not invent a fixed legal retention period that has not been adopted. A formal request workflow can be published once that policy is approved.