Trust and legal
Trust Centre
This page states what the public RelianceCheck site does, what it does not do, how it is served, and how to report a security concern. It describes this website only.
What this site is
A static explanation of the RelianceCheck service. It has no accounts, no sign-in, no document upload, no payment and no form. It does not call any assurance back end. No visitor content is processed here.
Hosting and transport
The site is served by Cloudflare Pages over HTTPS. Cloudflare operates the network that delivers the pages and may process connection data, such as IP addresses and request logs, to deliver and protect the site. We do not add any analytics, tracking or third-party scripts of our own. See the Privacy Notice and the Cookie Notice.
Security controls on every response
Every page is served with these headers. They are part of the released build and checked before release.
| Control | What it does |
|---|---|
| Content-Security-Policy | Only this origin may serve scripts, styles, fonts and images. Connections to other hosts are blocked (connect-src 'none'). Form submission is blocked (form-action 'none'). The site cannot be framed. |
| X-Content-Type-Options | Browsers may not guess content types. |
| X-Frame-Options | The site cannot be embedded in another page. |
| Referrer-Policy | Only the origin is sent to other sites you follow a link to. |
| Permissions-Policy | Camera, microphone, location, payment and USB are switched off. |
| Cross-Origin-Opener-Policy and Cross-Origin-Resource-Policy | Pages and assets are isolated to this origin. |
Release integrity
The header artwork and the web font are locked by SHA-256 hash in the release contract. The
release verifier checks the hashes, the security headers, the page frame, colour contrast and
the no-processing boundary before any release. The version of this site is recorded in the
release contract as reliancecheck-public-reactivation/2026-10-14.3.
The private pilot
Assurance work happens in a separately gated private pilot, not on this site. Its controls are agreed with each participant before any work is shared. This page makes no claim about that environment.
Report a security concern
Email hello@reliancecheck.com with the subject “Security”. Describe what you found and how to reproduce it. Please do not test against other people’s data; this site holds none.