Security

This page summarises the security posture for the public XeonTek website. Product-specific, client-specific, or service engagement security commitments are provided separately where applicable.

Website Security Model

This website is a static site hosted on Cloudflare Pages. It does not provide user accounts, payment processing, customer dashboards, or public APIs beyond form submission endpoints. The contact form is protected by Cloudflare Turnstile and delivered through a Cloudflare Worker.

Hosting and Subprocessors

Cloudflare provides hosting, CDN, security filtering, Turnstile bot protection, the Workers runtime, and cookieless traffic measurement for this website. Brevo provides transactional email delivery. Google provides website analytics, loaded only where a visitor has consented to analytics cookies. Details about how website personal data is processed are in our Privacy Policy.

Vulnerability Disclosure

To report a security issue affecting this website, contact [email protected]. Please include enough detail to reproduce the issue and avoid actions that could disrupt service, access data that is not yours, or test third-party systems without permission.

Current Public Assurance Position

This website does not claim that XeonTek Ltd is ISO/IEC 27001 certified, ISO/IEC 27001 compliant, SOC 2 certified, or SOC 2 audited. Any future certification, audit, or compliance statements should identify the exact entity, scope, dates, and evidence behind the claim.

XeonTek Ltd is registered with the UK Information Commissioner's Office as a data controller under registration number ZC207101. That registration is a statutory data protection fee registration, not a security certification or an assessment of our controls.

Security Controls for This Website

• Static deployment with no website user database
• TLS encryption in transit
• Cloudflare CDN and security services
• Cloudflare Turnstile protection on the contact form
• Security headers configured for the static site
• Analytics cookies set only with consent, and none before it
• Cookieless traffic measurement that stores nothing on your device
• No behavioural advertising cookies, and advertising signals disabled

Contact

XeonTek Ltd
Company number 08454858
Registered in England and Wales
27 Old Gloucester Street, London, WC1N 3AX, United Kingdom