AWS serverless back end
The Ask Elaria assistant runs as a serverless function on Amazon Web Services (AWS Lambda) infrastructure. There is no always-on server or database to break into, and its API key is kept in server-side environment settings — never in your browser.
Encrypted in transit
Every page is served over HTTPS with a current TLS certificate. Plain-HTTP requests are redirected, and HSTS tells browsers to use encryption on every return visit.
Nothing stored on our servers
This form does not save to a database. It composes an email in your own mail app, so you see and control exactly what is sent. Bookings are handled by Google Calendar with a unique Meet link per meeting. Elaria does not store chat transcripts; messages are processed by our AI provider under its data policy.
Abuse controls on the assistant
The assistant refuses any request that does not come from elariaagentic.com, applies per-visitor rate limits, caps message length, and is instructed to refuse patient health information.
Hardened browser headers
Pages cannot be framed by other sites (clickjacking protection), file types cannot be spoofed, referrer data is minimized, and camera, microphone and location access are switched off. No advertising trackers or analytics cookies; fonts and the booking calendar are served by Google.
HIPAA posture and insurance
This website is not a system for patient data — please do not include PHI. Client work involving PHI runs inside environments covered by the client's own business associate agreement (for example, AWS under the client's BAA). Elaria Agentic carries Technology E&O and Cyber Liability coverage; a certificate is available on request.