Resources

Company facts, how we handle data and security, our policies, and short guides for clients, procurement teams and press.

Company

Legal name: Altshuler Inc.
Incorporated: Canada
Studio: Altshuler Dev
Questionnaires and NDAs: Security questionnaires, NDAs and vendor forms on request. Ask us.

Hosting: Client websites are usually hosted on Cloudflare's global network. We can also work within a client's own hosting accounts.
Code: Kept in private repositories. Passwords and keys are stored separately from code, never inside it.
Client data: Stays in the systems the client chooses. We access it only as far as the work requires.
Maintenance: Hosting, security updates and improvements are available as an ongoing service, agreed in writing.
Accessibility: We design to WCAG 2.2 AA and check on phones, tablets and desktops before launch.

Hosting: Static pages served over HTTPS from Cloudflare Pages. There is no database behind this website.
Cookies and analytics: None. This site sets no cookies and runs no analytics or advertising scripts.
Fonts and scripts: Fonts and scripts are served from our own domain. No third-party requests are made when you browse.
Contact form: Messages are delivered to our inbox through a form service and used only to reply to you.
Security settings: HTTPS enforced with HSTS, a strict Content Security Policy, and protections against framing and content sniffing.

Write down the one result that matters most, such as more inquiries or less admin time.
List who will use it and on which devices.
Collect what already exists: domains, logins, brand files, content and data.
Decide who on your side can approve decisions quickly.
Plan for after launch: hosting, security updates and who makes changes.

Text has enough contrast to read, and the page still works when zoomed to 200%.
Everything can be used with a keyboard, with a visible focus outline.
Images have text alternatives and video has captions.
Forms explain errors clearly and don't rely on colour alone.
In Ontario, AODA requires WCAG 2.0 AA for most organisations with 50 or more staff. The EU and US have similar rules.

Collect only what you need, and say why right where you collect it.
Keep marketing opt-in as a separate, unchecked box (required by CASL in Canada).
Block tracking pixels until a visitor in the EU, UK or Quebec agrees to them.
Publish a privacy policy with a real way to reach the person responsible.
Honour browser privacy signals such as Global Privacy Control.

For press inquiries, contact us. Our logo is available as an SVG file.