Trust & security

What is in place, and what is not.

Signed: International Sign — pending How this page is tested

This page in sign language

Signed end to end by a Deaf creator, credited by name. International Sign on the global site; your national sign language on your country page.

International Sign Captions + transcript ship with the video.

Accessibility work reaches people at their most exposed — a clinic desk, a consent form, a call for help. So this page says what is true today, names what is still being written, and claims no certification we do not hold.

This website

It collects almost nothing, on purpose.

In plain words

This website does not use cookies. It does not track you. Nothing you choose here is sent to us — it stays on your own device. You can read the whole site without telling us anything.

  • No cookies, no trackers, no advertising pixels. There is nothing to consent to, so there is no consent banner.
  • Your settings stay on your device. Theme, text size, reading voice, sign language and country are stored in your own browser and never sent to us. Clearing your browser data clears them.
  • Static pages. The site is built ahead of time into plain files. There is no database behind it and no login to attack.
  • Video is not embedded until you ask. Players load only when you press play, so a video host cannot see you until you choose to watch.

If we do not collect it, we cannot lose it.

The full detail of what happens when you use the contact form or the newsletter is on the privacy page.

A deployment

Three kinds of data, three different answers.

  • Creator work

    A recorded sign language video is a named person's labour and likeness. Creators are credited by name, keep the credit on their work, and agree to where it may be shown before it ships.

  • Content you already own

    Access tracks render over content your viewers already lawfully access. Your files are not re-hosted, copied, or moved to us.

  • Anything involving a live person

    A relay or help-desk call touches a real conversation, sometimes a clinical one. Retention, access control and who may review a session are set per engagement, in writing, before anything goes live.

Not yet

What we will not claim.

Plenty of accessibility vendors list certifications in their footer. We hold none of the following, so we do not display them:

  • No ISO 27001 certification.
  • No SOC 2 report.
  • No HIPAA or equivalent attestation.
  • No independent penetration test yet published.

When any of those exist, they will appear here with a date and a way to verify them — the same rule as every other claim on this site.

A certification we do not hold is not a detail. It is a lie with a logo.

A written sub-processor list, a breach-notification window and data-residency options are being prepared for deployment contracts. Ask and we will send the current draft rather than a summary of it.

Reporting

Found something? Tell us directly.

If you believe you have found a security problem, write to us before disclosing it publicly and we will confirm receipt. We will not pursue anyone who reports in good faith.

Next step

Reviewing us for a deployment? Ask for the current terms, not the summary.

Talk to us