Security.

How we build

• Least-privilege access to client systems and data; access removed when a project ends.
• Secrets kept out of source code; migrations and infrastructure changes in version control.
• Third-party services isolated behind adapters with timeouts, retries and validation at the boundary.
• Structured logs and audit trails so incidents can be reconstructed.
• NDAs and data processing agreements available on request.

Reporting a vulnerability

If you think you’ve found a security issue in this site or in something we built, email hello@ahtech.world with “Security report” in the subject. Please give us reasonable time to fix it before disclosing publicly, and don’t access data that isn’t yours. We will acknowledge your report within 1 business day.