This page describes the implementation available for review. It does not assert security certifications, regulatory compliance or independently assessed production controls.
Hosting and infrastructure
This website is built with Next.js and configured for static export. Its enquiry form submits to Supabase. A Netlify build configuration is included, but the live hosting provider and production infrastructure have not been verified. Product hosting arrangements require separate confirmation.
Data encryption
The source code does not establish the live transport security configuration, database encryption settings or key management arrangements. We do not specify encryption algorithms or make an at-rest encryption guarantee here. These details must be verified for the selected hosting and database environments.
Multi-tenant data isolation
This public website does not provide customer tenant workspaces. Its enquiry database policy is not evidence of product tenant isolation. Product data boundaries and isolation controls must be reviewed against the implementation used for your deployment.
Access control and audit logging
The included database migration enables row-level security on the enquiry table and grants anonymous and authenticated visitors INSERT access. It defines no public SELECT, UPDATE or DELETE policy. This describes the migration, not a verification of the live database. Enquiry records include a creation timestamp; this is not a security audit log. Product access roles, audit coverage and log retention require separate confirmation.
Backup and recovery
This website repository does not define scheduled database backups, recovery objectives or restore tests. Backup frequency, retention, recovery procedures and restore testing must be confirmed for the production environment before relying on them.
Data residency
The website configuration does not verify the regions used for hosting, enquiry storage or backups. A Singapore company address does not establish where data is processed. Please discuss required locations and cross-border processing constraints with us before submitting sensitive data or planning a deployment.
AI data usage and human oversight
The website assistant matches questions to curated answers in the browser; its implementation does not call a language-model API or submit conversations for model training. It keeps conversation history in browser session storage. This website assistant is separate from the product Copilot shown in the demo. Product model providers, data handling, training policies and human approval controls must be confirmed for the proposed deployment. Review assistant answers with your team before acting on them.
Discuss your requirements
Contact contact@syntellix.it.com to discuss deployment-specific security evidence and requirements.