Security & data handling

Assessment intake controls

The assessment form transmits contact details and a high-level problem description over HTTPS to the website’s server. The server validates the request and sends it through an authenticated Google Apps Script endpoint. A response copy is stored in a restricted CB3 Works Google Sheet, and Google Workspace sends the confirmation and receives the owner notification. The website does not provide file uploads or store assessment content in an application database.

Accepted information boundary

• Public information, clearly synthetic data, or information the customer explicitly authorizes for the agreed project.
• The minimum fields and records necessary to perform the scoped work.
• No employer-owned files, templates, relationships, code, credentials, or confidential information.
• No regulated, export-controlled, payment-card, health, or sensitive personal information without a separately approved control environment and written scope.

Controls required before client file intake

• Approved storage location, encryption in transit and at rest, named access, and multi-factor authentication.
• Written retention and deletion rules, project-level separation, and a tested deletion process.
• A documented tool and subprocessor list with customer approval where appropriate.
• Backup, recovery, incident response, access review, and audit evidence proportionate to the engagement.

Delivery verification

The working standard is: define the requirements, build and verify, challenge the result independently, and complete a manufacturing-led review. Each delivery should carry source and refresh information, assumptions, checks performed, known limitations, version identification, and user acceptance evidence.

Customer responsibilities

Customers remain responsible for the accuracy and authority of supplied information, access decisions, business-rule confirmation, final operational judgment, and compliance requirements specific to their industry or contracts.

Report a concern

Report security concerns to security@cb3works.com. Do not include sensitive data, credentials, or suspected malicious files in the report; CB3 Works will provide an appropriate follow-up channel if needed.

Mailing contact

Mailing address only. Services are provided remotely; this is not a walk-in office.

General questions and help with a request: hello@cb3works.com.