Security & governance

Webclat is a Florida limited liability company operating under a registered trade name; the contracting entity is disclosed in proposals and agreements. 6901 Professional Pkwy E, Sarasota, FL 34240, USA.

Certifications: we do not currently hold SOC 2 or ISO 27001. We say so plainly rather than imply otherwise. Our controls are below and our documentation is open to your security review.

How we access client systems: named accounts only, granted by you, least-privilege, time-boxed, logged, and revoked at engagement close. We never ask for passwords.

Where work happens: in your own stack. We do not host, copy, or commingle your customer data on Webclat systems; deliverables live in your warehouse and your tools.

Data protection: GDPR and CCPA are design inputs to everything we build. Client data stays in client systems: we do not store personal data on Webclat systems, and the pipelines we build run entirely in your stack. Where an engagement gives our named accounts access to systems containing personal data, that access follows the least-privilege model above and your own controls, and we sign the data-protection terms your engagement requires.

Subprocessors: Vercel (site hosting); Google Workspace (email); HubSpot (booking form submissions); Google Gemini API (the interactive audit tool on this site); Google Analytics and Google Ads (site measurement and advertising); Microsoft Clarity (site analytics).

Insurance: professional liability (E&O) coverage is in force; a certificate of insurance is available under NDA.

Security questionnaires: we complete yours on request.

Incident and security contact: info@webclat.com