SECURITY & COMPLIANCE
Security & Compliance
Our current website controls and the boundaries requiring project review.
Website protection, customer delivery, and restricted environments have different requirements. This page describes verifiable website measures and does not claim certifications or qualifications we have not established.
Version date · 2 October 2026
Website controls
The site uses HTTPS and serves static public pages. Its private analytics dashboard is separate and is not accessible as a public internet page. Server logs rotate under the current configuration, and IP addresses are removed before events reach the dashboard.
Analytics controls
Optional analytics is off by default and requires an affirmative choice. Browser Do Not Track and Global Privacy Control settings are respected. Visitors can change their choice from any page footer. Events contain no form inputs or full referring URLs.
Customer projects
Each project should separately establish data location, model and external API use, access rights, isolation, operational authorization, and acceptance criteria. On-premises deployment or a confidentiality agreement alone does not establish compliance with every restricted-data or industry rule. Project-specific measures must be agreed and verified.
Certifications and third parties
This page does not state that XUNYE holds ISO, classified-information, security-level, or other specific certifications. Third-party products, cloud resources, and open-model licences require review against the actual selection and agreement.
Security contact
To report a website security issue or discuss security for a service, email us below with necessary reproduction details. Please do not publicly send sensitive data.