Bounded submissions
The public form endpoint takes JSON only, caps the request size, and caps every text field inside it.
Nothing to wire up. You describe the business in plain language, Ifa designs and builds it, and you check the plan before any of it exists.
Security & data handling
Clear information about what is implemented today.
This page sticks to what is implemented today. Anything we cannot point at in the repository or the deployment configuration is not claimed here.
Protections visible in the marketing-site implementation
Each of these can be inspected in the code that runs this site.
Spam reduction
A hidden field and a browser-side cooldown, with the same neutral response either way so a bot learns nothing.
No-store responses
Form responses are marked no-store, so a submission result is never served again from a cache.
Environment-managed delivery
Mail credentials and the notification address come from deployment configuration. Neither is in the source.
Identifier-only notification
The owner's email carries a request reference and a link. It does not carry the contact details or the free text.
No product session on this site
This site has no login, no account session and no direct route into the product's services.
Product principles
Review, isolation, and explicit access are part of the architecture.
Each service in the product owns its own schema and connects with its own least-privilege role. Workspace actions run as typed, validated operations that keep their review and audit context instead of executing whatever they are handed.
These are architectural controls. They are not a certification, and they are not a substitute for your own legal and security review.
Current publication boundaries
- No certification, compliance, penetration-test or independent-audit claim is made anywhere on this site.
- No uptime, recovery-time, backup-frequency or incident-response guarantee is published here.
- Please do not send passwords, payment credentials or medical information through the public forms.
- Clinical, patient-record and regulated healthcare workflows are outside the current product scope.
Need detail before sharing business information?
Write to hello@ifa.solutions with what you need to know. You will get a direct answer that separates what exists today from what is planned.
Continue exploring
Whichever one answers your next question.