SILReady Docs
Security and Data Handling
How the service limits and protects data.
Data minimisation
Do not submit participant-sensitive data. The questionnaire accepts organisation-level information only. Stripe handles card data.
Controls
Server validation, security headers, protected admin routes, secure cookies, signed expiring links, download limits, webhook signature checks, idempotency, audit logs and rate limiting protect core workflows.
Shared responsibility
Customers must protect email and download access and report suspected compromise. No system is risk-free; contact support for security concerns without including sensitive participant information.