What we keep, and what we don't.
We work with organizations that are targeted for who they are and what they do. Here's exactly what happens to information you share with us, in plain language.
- We never ask for your name, email or phone number to use the security check-in.
- If you don't choose to save your answers, we don't store them.
- If you do, they're encrypted with a key unique to your submission and deleted after 90 days.
- Our website can't read saved answers. Only Lamplight Security can, and every access is logged.
- We don't use analytics, ad trackers or tracking cookies.
The security check-in
When you submit the questionnaire, your answers are sent over an encrypted connection to our server. It passes them to Claude, an AI model made by Anthropic, running inside Amazon Web Services (AWS) through a service called Amazon Bedrock, which writes your recommendations. Anthropic's staff have no access to the systems it runs on. Amazon describes how Bedrock handles this data in its data protection documentation.
Our server keeps a technical log that a request happened and whether it succeeded. That log never contains your answers or your recommendations.
If you choose to save your answers
- We store your answers and the recommendations you were shown, under a reference code like
LL-7F3K-Q9WX. Nothing that identifies you is attached. - Before storage, the record is encrypted with its own key. The part of our system that runs the website can create these keys but cannot use them to decrypt anything, including records it saved itself.
- Only Lamplight Security can decrypt a record, one at a time, by its reference code. Each time we do, AWS logs it.
- Records are deleted automatically after 90 days, and we keep no backups of them. To have yours deleted sooner, email us your reference code and ask.
- We only look up a record when you contact us and include its code.
Contacting us
Messages you send us, including the draft the check-in prepares for you, go through your own email. We receive only what you choose to send, and you can edit it first.
Website security
To protect the site from attacks and automated abuse, our hosting keeps standard access logs (IP address, time and page requested), and a security check may set a short-lived cookie to confirm you're using a real browser. These never include your questionnaire answers, and we don't use them to track or identify visitors.
Questions
Email chuckabird@gmail.com. We'll answer plainly.