Public website · Security principles
Control before capability.
These principles describe the intended approach and the public-site boundaries. They do not claim certification, an audit result or absolute protection.
Minimum public exposure
This repository contains public content, local synthetic fixtures and public-form code. It does not contain government connectors, product authentication or confidential processing logic.
Fail closed
Unavailable form delivery, missing bot verification or invalid download configuration must produce an honest unavailable state. A success message must never conceal a lost enquiry.
Before real-data access
Appropriate access controls, isolation, retention, confidentiality arrangements and professional-review responsibilities must be verified for the actual pilot environment. This website does not establish those gates as complete.
Report a concern
Contact privacy@aimanlegal.com with a brief description. Do not include passwords, credentials or customer records in the initial message.