Security

This page describes how linnia.io, our public marketing website, is built and operated. It does not describe Linnia's healthcare product, which runs on separate infrastructure with its own security controls.

Linnia is not currently SOC 2 certified. This site is operated in a way that supports our ongoing security and compliance work, not as a claim of certification.

Scope

This is a static, public marketing site with no user accounts, no database, and no application backend. It does not collect, store, or process protected health information (PHI) or any patient data. There is no privileged connection between this website and Linnia's healthcare product — the two share no infrastructure, credentials, or data stores.

Infrastructure

The site is served over HTTPS by Cloudflare, which manages TLS certificates automatically. All HTTP requests are redirected to HTTPS. Production responses include a Content Security Policy, HTTP Strict Transport Security, and standard hardening headers.

Source control and deployment

The site's source code lives in a version-controlled GitHub repository, which is the single source of truth for what is deployed. Changes go through pull requests and automated checks (type checking, linting, a production build, and dependency vulnerability scanning) before reaching production. Production files are never edited directly.

Dependencies

Dependencies are pinned with a lockfile and monitored for known vulnerabilities. High- and critical-severity findings are evaluated before release.

Reporting a concern

If you believe you've found a security issue with this website, please contact your Linnia representative.