Nothing here takes evidence.
This page exists so a security officer has something to file. It says what the public site is, what it is not, and where client material actually goes during an engagement.
The public site
Nothing. There is no form, no upload, no account, no comment box. The only way to reach the practice from this site is an email link.
Nothing about you. No cookies, no analytics, no third-party tags, no script of any kind. The Worker serves static pages under a content-security policy that forbids inline styles and scripts.
Scheduling and scoping only. Do not send credentials, CUI, client evidence, or mission data to it. If you do by mistake, say so in a second message and it will be deleted unread where that is possible.
Fictional engagements only. Every application, boundary, and figure on this site is a public pattern. No client environment appears.
Inside an engagement
In your approved environment. The record reads references, assertions, evidence positions, owners, conditions, and decisions; protected source stays in your custody.
Enclave and offline: one file that never phones home, on a device your handling regime approves. Closeout leaves your documents and an erasure receipt.
Non-CUI by default; CUI only on devices approved for it; never classified material. Same six weeks, same fifteen deliverables, lighter handling.
Evidence informs; named people decide. The applicable Authorizing Official retains every authorization decision. No score is a gate.
Questions about handling before an engagement are part of the scoping conversation. Start a conversation · Accessibility