Security & when things break
Compliance
13 guides across 3 sections
Compliance7
- ADA & WCAG: web accessibility compliance in the USWhat the Americans with Disabilities Act and the Web Content Accessibility Guidelines mean for your website, and how we build with accessibility in mind.
- CCPA & CPRA basics for businesses serving CaliforniaWhat California's consumer privacy law means for your website, who it applies to, and the practical steps we take to help you align with it.
- CompliancePlain-English guides to the web-related laws and standards that affect your business — from privacy and accessibility to payment security.
- Cookie consent law: when & howWhen your website needs a cookie consent banner, what it must include, and how we implement one that meets GDPR and CCPA requirements.
- GDPR basics for businessesWhat the EU's General Data Protection Regulation means for your website, even if your business is based outside Europe.
- HIPAA basics for websites handling health infoWhat HIPAA means for your website if you work in healthcare or collect health-related information, and the technical safeguards we implement.
- PCI compliance for online storesWhat PCI DSS means for your e-commerce site, how payment processing actually works, and why the way we build stores keeps your PCI burden small.
Industries4
- Healthcare websites & HIPAA basicsWhat healthcare providers need to know about building a trustworthy website that handles patient information responsibly.
- Non-profit websites: donations, volunteers & boardsHow non-profit organizations can build websites that drive donations, recruit volunteers, keep boards informed, and handle donor data responsibly.
- Real estate websitesWhat real estate agents, brokers, and agencies need from their website — from IDX listings to lead capture, fair housing compliance, and agent branding.
- Websites for legal & accounting practicesHow law firms and accounting practices can build websites that earn trust, generate consultations, and handle client information responsibly.
Developer platforms2
- AWS KMS & encryption keysWhat AWS Key Management Service does, how key policies control access, why rotation matters, and why deleting a key is irreversible.
- ClamAV & scanning uploaded filesWhat ClamAV does, why applications that accept file uploads need malware scanning, and how it fits into a wider upload-security approach.