Trust is an engineering practice.
We keep access deliberate, collect only what a workflow needs, and make the boundaries between independent products explicit.
Application controls
The AMIKUK platform validates submissions on the server, authorizes administrative operations individually, records administrative changes, and limits public form requests. Brand uploads are restricted to signature-checked raster image formats. Secrets and access membership remain server-side.
Product boundaries
The ecosystem registry is a directory of public metadata. Its connections do not grant access to other products or establish shared authentication. Future integrations require separate review of their data, permissions, and purpose.
Responsible reporting
Use the contact form and select “Security disclosure.” Share the affected URL, a concise description, and your contact information. Avoid including live credentials, personal information, or destructive proof-of-concept material in the first message. This channel records an inquiry for private review and is not an emergency service.
Evidence and accountability
Security work continues through testing, updates, monitoring, and operational review. AMIKUK does not claim independent certification or universal compliance with healthcare, education, or privacy regulations. Obligations must be evaluated against each product’s actual operations and data.