Is it safe?

Form entries, staff logins and your pages are held in a Supabase database in London. The website itself is served from Render’s data centre in Frankfurt, under the same European data protection rules, and it keeps no records of its own.

Only the people you choose. Each entry is saved and emailed to your inbox. The website can add an entry but can never read one back, so even a fault on the website could not expose them.

Every page and form travels over an encrypted connection, shown by the padlock in the browser. The database encrypts everything it stores, as well.

There is no WordPress and there are no plug-ins, which are the most common way into small charity websites. The database is closed by default, and every request is checked against who is asking. Forms have traps and limits for spam robots.

Only staff you invite, and each login works for your site alone. Nobody can sign themselves up, passwords known to have leaked elsewhere are refused, and our own administrator accounts need a second code to sign in.

Every published version is kept, so a mistake can be undone in moments. Automatic checks run before any update goes live and stop it if anything fails. If the database is ever unreachable, the last good copy of your site stays online.