Security and data
Where your information goes, and who can reach it
If you ask Evyren to build something, you may be handing over access to a customer list, a message history, an inbox or an internal system. That deserves a straight answer rather than a badge. This page says what actually happens, for this website and for client work.
You own what we build
The source code, the data, the domain, the hosting, the database, the connected accounts and the documentation are yours. Accounts are created in your name wherever a provider allows it, so access never depends on us. On completion you receive the code, the documentation and the credentials, and another engineer can take the system forward without our help.
This website
The site is hosted on Vercel and served over HTTPS. What you send through the enquiry form goes to our email and to our CRM, and is used to reply to you and scope the work you asked about. Analytics are described in the privacy notice. No account is created for you and no password is held.
Client systems
A project uses only the access it genuinely needs, and that access is named in writing before it is granted. Credentials and keys are held in the project's own secret store, never in source code, never in a message and never in a spreadsheet. Test data is used wherever real data is not required. Work is version controlled, so every change is attributable and reversible.
AI providers
When a system uses a model, the quotation names the provider, what is sent to it and what is not. Business APIs from the major providers do not train their models on data sent through them, and we configure them that way. Anything that should never leave your systems is handled inside them instead, and we say clearly when that limits what is possible.
Who can reach it
Evyren is small, which means the list of people with access to your systems is short and you will know each name. Access is removed at the end of a project unless you have asked for ongoing care, and you can revoke it yourself at any time because the accounts are yours.
Keeping and deleting
Enquiries stay in our CRM so we can answer you and pick up a conversation later. Project material is kept while we support the system, and removed on request. Ask us at hello@evyren.com to delete anything and we will, and we will confirm when it is done.
If something goes wrong
You will hear it from us first. We tell you what happened, what it affected and what we are doing about it, on the same day we know. A system we support is monitored, and backups are part of every build that holds data worth losing.
What we are not claiming
Evyren is a young company and holds no security certification. This page describes practice, not an audit. If your project needs a formal standard, say so early and we will tell you honestly whether we are the right partner for it.
Last updated September 2026.