Security & Compliance

Because your legal team forced you to click this.

Audit Ready*

Listen, we know you don't care about this. We don't care about this either. But some guy in a Patagonia vest named "Brad" from your procurement department won't let you expense ChadCDN unless we have this page. So here is a bunch of certified enterprise bullshit.

SOC 2 (Security Theater On Cloud 2)

We successfully paid a Big 4 accounting firm $80,000 to look at our AWS console for 15 minutes and issue a PDF with a watermark. We are Type II compliant, meaning we proved we can follow our own made-up rules for at least 6 months without getting bored.

ISO 27001 (I Surrender (to) Overhead)

We have documented processes for how we update our documentation about processing documents. If there is a breach, we guarantee it will take exactly 72 hours of middle-management meetings before we admit it on Twitter.

GDPR (Go Do Productive (shit) Rather)

If you are European, relax. We encrypt all your data using base64. If you ask us to delete your data, we just change your username in the database to "null_user_42" and call it a day. Good luck proving otherwise.

HIPAA (Highly Invasive Pain in the Ass Act)

Are you sending patient health records through a UI component library? What the fuck is wrong with you? Please seek professional help. We are not liable when your patients find out they have chlamydia because you passed it as a prop to a <Card> component.

Vulnerability Disclosure Program (VDP)

If you find a security vulnerability, please email /dev/null@chadcdn.com.

Bounty Rewards: We do not pay cash. If the bug is critical enough, we might send you a highly compressed JPEG of a thumbs-up emoji.

* We actually aren't audited. We just put "Audit Ready" because it sounds provocative.

← Back to the safe zone