Security
How this site handles your data.
AICG Canada keeps a deliberately small attack surface. The website is a static, Cloudflare-hosted site with a minimal serverless backend that exists only to receive your contact request.
In transit
All traffic is served over HTTPS and forced to HTTPS (HSTS). The site applies a strict Content-Security-Policy, frame-blocking, and content-type protections on every response, and loads no third-party tracking or advertising scripts.
At rest
Contact submissions are stored in a Cloudflare D1 database within Cloudflare's infrastructure and are used only to review your inquiry and follow up. Transactional email (your confirmation and our internal notification) is sent through a reputable email provider. Access to submissions is limited to authorized AICG Canada team members and service providers on a need-to-follow-up basis.
Abuse protection
The contact endpoint validates request origin and payload size, applies rate limiting, and uses a honeypot spam trap. We collect only what the form asks for, plus minimal technical metadata (browser user agent and approximate country) to keep the service reliable.
Responsible disclosure
If you believe you have found a security issue with this website, please email support@aicgcanada.com with the details. We appreciate good-faith reports and will respond as quickly as we can.