Security
LeadArivo security
Controls we can describe because they are implemented on this website or documented as product requirements. This is a trust page, not a certification badge wall.
Website and enquiry controls
- HTTPS with HSTS when the site is served over HTTPS
- Content-Security-Policy, X-Frame-Options DENY, nosniff, Referrer-Policy and a restrictive Permissions-Policy
- Validated enquiry forms, honeypot field, submission size limits, one-time challenge tokens and optional Cloudflare Turnstile
- Enquiry submissions are accepted only when the production inquiry pipeline is enabled for the deployed origin
- CMS preview cookies are httpOnly and SameSite=strict
LeadArivo product principles
LeadArivo is designed as a multi-tenant product. Product documentation requires tenant isolation, authentication (including JWT-based application access) and permission boundaries so one customer cannot access another customer’s data. Those are product requirements; this page does not publish internal network diagrams or secret configuration.
Supported automations may assign work, create follow-ups and notify the team. They do not send customer messages on their own. Human-required actions stay visible on the lead.
What we do not claim
This page does not display SOC 2, ISO 27001, HIPAA, PCI DSS, “GDPR Certified”, CSA STAR or similar badges. TEAL Infotech has not published those certifications for LeadArivo on this website.
Encryption-at-rest, backup restoration tests, 24/7 SOC monitoring and named production cloud regions are not described here because they are not verified public facts on this site.
Report a security issue
Found a potential security issue? Report it responsibly. Do not exploit it beyond what is needed to demonstrate the issue.
Go to Responsible Disclosure or email info@LeadArivo.com with the subject line “Security report”.
