Soveris LogoSoveris
Back to Home

Security Overview

Last updated: September 2026

We take a pragmatic, minimalist approach to security. By reducing our attack surface and relying on established infrastructure, we ensure your interactions with our site remain safe.

1. Hosting & Edge Infrastructure

Our application is deployed on Cloudflare Workers and delivered across Cloudflare’s global edge network.

  • Encryption in transit: All connections are strictly served over HTTPS with modern TLS encryption. Non-secure requests are automatically redirected to HTTPS.
  • DDoS mitigation: Cloudflare provides baseline volumetric DDoS mitigation and edge-level firewall protection to keep the site online and responsive.

2. Minimal Attack Surface & Data Storage

The most secure data is the data we never collect or hold:

  • No server-side user database: We do not operate or maintain a database of user passwords, logins, or personal profiles on our servers.
  • No session or authentication tokens: Because there are no accounts required to use this site, there are no session cookies or authentication tokens stored on our servers.

3. Third-Party Integrations & Secrets

  • Email subscription pipeline: When you subscribe to our newsletter or waitlist, the submission is processed through our serverless endpoint and transmitted directly to Loops (loops.so) via encrypted HTTPS API calls.
  • Protected API secrets: Secret keys (such as our Loops API key) are kept securely as server-side environment variables on Cloudflare and are never exposed in client-side code bundles.

4. Client-Side & PWA Practices

  • Local storage: Browser localStorage is only used to preserve non-sensitive interface preferences (such as light or dark theme).
  • Service worker: Our Progressive Web App service worker only caches static assets (HTML, stylesheets, scripts, icons) to provide offline capability and fast load times. It does not cache sensitive personal data.
  • No tracking scripts: We do not load external third-party tracking scripts, advertising SDKs, or social media pixels.

5. Vulnerability Reporting

If you identify a security vulnerability or concern within our application or infrastructure, please let us know so we can address it promptly.

You can reach us directly at:

contact@soverishq.com

Please include steps to reproduce the issue and allow a reasonable time to review and resolve the matter before sharing details publicly.