Encrypted delivery
HTTPS on getcoden.co and www.getcoden.co, served through Cloudflare.
← Back to CodenTRUST / BUILT WITH CARETrust is earned.
Trust is earned.
One detail at a time.
A transparent view of the website safeguards in place today and the work ahead.
Private submissions
Form data is stored in D1. There is no public endpoint for reading submissions.
Safer form handling
Server-side validation, parameterized database queries, request-size limits, cross-origin checks, a honeypot, and rate limiting.
Less tracking
No advertising or analytics trackers. Fonts are served from our own website.
ISO/IEC 27001 readiness
Readiness work is in progress. Coden is not ISO/IEC 27001 certified, and no certificate is currently available.
Independent assurance
Further assurance, including SOC 2, is part of our security roadmap. No SOC 2 report or independent audit claim is made.
The scope matters
These controls describe this marketing website and its forms. Product security controls and processing terms for production HR and payroll data will be shared before access is enabled. We do not claim that hosting-provider certifications certify Coden.
Report a concern
Use our security contact form to report a vulnerability or request more information. Do not include secrets, employee records, or unnecessary personal information in a report.
Security enquiries: security@getcoden.co