Confidentiality and Data Handling
Submitted files are routed through a server-backed upload endpoint, checked for type and size, and stored outside the public site directory. Access is limited to the operational workflow around gateway review.
This page supports the gateway by explaining the practical handling standards around confidentiality, upload security, submission logs, and review workflow.
Submitted files are routed through a server-backed upload endpoint, checked for type and size, and stored outside the public site directory. Access is limited to the operational workflow around gateway review.
Administrative logs are recorded for each submission so that receipt, status, and handling events can be traced without exposing uploaded files publicly.
A honeypot field is enabled by default. CAPTCHA is reserved for production scenarios where additional friction is needed, rather than being forced into every submission flow from the start.
Accepted file types and upload size limits are enforced server-side. The recommended production stack also includes malware scanning on uploads and security headers at the hosting layer.