Security Policy
Last Updated: May 2026
Scope
This policy applies to the CASER marketing website at caserlegal.com and related static web properties created and operated by Adam Doherty. The CASER iOS application has its own security and privacy practices documented in the App Store listing and in-app Terms & Privacy.
Reporting a vulnerability
If you believe you have found a security issue, please report it responsibly to caserlegal@proton.me. Include a clear description, steps to reproduce, and impact assessment. We aim to acknowledge reports within five business days.
What we host
The public website is a static site (HTML/CSS/JS) deployed on Vercel. We do not process payments, store user accounts, or collect form submissions on this domain. Contact requests use mailto links handled by your email client.
Transport and headers
We enforce HTTPS with HSTS, Content-Security-Policy, frame denial, and related browser protections via our hosting configuration. Third-party scripts are minimized; the site does not load advertising trackers.
Dependencies
We monitor npm advisories and apply patches to build dependencies. Production visitors receive pre-built static assets only.