Trust and security
Security controls that match the sales pitch.
The site is built around simple data capture, restricted API access, and clear privacy handling. No exaggerated certification claims, just the controls that are actually in place.
Application security
- Inquiry, calculator, and Venture Studio forms are submitted through a Cloudflare Worker, not directly from the browser.
- Third-party API keys (including the one powering Aria) live only in server-side Worker secrets and are never exposed to client-side code.
- Rate limiting is enforced per IP across every API route.
- CORS is restricted to the production origin plus localhost for development.
- Security headers are attached to all HTML and static asset responses, and Cloudflare sits in front of the application at the edge.
Data handling & privacy
- Outbound form data is HTML-escaped before email delivery to prevent injection.
- Contact and inquiry data is used only to respond to that inquiry: it is not sold or shared with third parties.
- Privacy and cookie policy copy is written to be PIPEDA- and GDPR-aware; read the full policy for the current scope rather than relying on marketing summaries.
- We do not claim a formal privacy certification (e.g., a completed SOC 2 or ISO 27001 audit) because we do not currently hold one: ask us directly if your procurement process requires evidence of one.
AI assistant (Aria) handling
- Aria runs through a server-side Worker route: visitors never receive a direct API key.
- Conversations are used to generate the response and route your inquiry; they are not used to train TrivianEdge products.
- Model providers govern their own API-level data retention and training policies, which we can walk through on request for enterprise reviews.
Employment & compliance posture
- TrivianEdge Inc. is a federally incorporated Canadian corporation under the Canada Business Corporations Act, registered in Toronto, Ontario: that filing is public record.
- TrivianEdge coordinates global hiring through in-country employer-of-record and payroll partners rather than claiming to be the direct legal employer in every jurisdiction: ask us for the specific structure in your target country.
- Payroll, statutory deductions, and local employment law are administered through those partners and reviewed as part of every engagement.
- Contracts specify IP ownership, confidentiality, and data-handling terms before any work begins.
Operational governance
- Requests are routed through a single API surface for easier monitoring and incident response.
- The site is designed to keep lead capture simple, logged, and auditable rather than scattered across disconnected tools.
- We are transparent about what is and is not yet built: see the compliance posture note above rather than a blanket claim.
Worked with us? Leave a review.
We use Trustpilot for independently verified client feedback rather than curating quotes ourselves.
Want a direct response?
Use the inquiry flow and we will follow up with the next step.