Security

Last updated: May 2026

Governing Idea is built with a minimal‑data, privacy‑first architecture. We collect as little personal information as possible and use modern infrastructure to protect it. This page outlines the core security practices we follow to safeguard your data.

Our Security Practices

• HTTPS enforced across all pages and API routes.
• Data minimization — we collect only what is necessary to operate the service.
• No advertising or tracking cookies.
• Modern hosting and infrastructure provided by Vercel.
• Access controls for internal systems and administrative tools.
• Breach notification without undue delay if personal data is affected.

Subprocessors

For a list of vendors who support our hosting, email delivery, and infrastructure, see our Subprocessors page.

Data Protection Terms

For contractual data protection terms, including our obligations as a data processor under GDPR Article 28, review our Data Processing Addendum.