Security & data posture

Concinna is a public-record intelligence product. Its security posture starts from a simple fact: there is no protected health information in it.

Data classification

• Public-record data only — federal and public authority sources.
• No PHI, and no patient-level licensed claims, on this property.
• No system covered by a Business Associate Agreement is exposed here.

In transit & at the edge

• All traffic served over TLS.
• Security headers enforced: content-type nosniff and frame-deny.
• Hosted on Vercel's edge network.

The lake itself

• Queries run against a read-only path; the asset is protected from mutation.
• Every dataset retains its named authority and source chain of custody.

Responsible disclosure

Found something? Email matt@runtalon.ai and we will respond promptly.