Security and data handling

A narrow public-data boundary.

TonyCrisp.com and the public D.O.S.E. Brand Health Score are marketing and educational services designed for public content and ordinary business-contact information.

Permitted information

The public Brand Health Score accepts a public business homepage URL and ordinary business-contact details needed to provide the requested result.

Do not submit sensitive information

Do not use this website or diagnostic to submit CUI, FCI, classified information, export-controlled data, credentials, nonpublic URLs, sensitive personal information, source code, security findings, confidential customer information, or proprietary materials.

Baseline practices

• Encrypted transport using HTTPS
• Data minimization and purpose-limited processing
• Security validation, rate limiting, and restricted public-URL handling
• Limited service-provider access required to deliver and protect the service
• Defined notices for retention and deletion requests

Compliance scope

This public website does not claim CMMC, NIST 800-171, FedRAMP, ITAR, export-control, government-system, or classified-system compliance. Contract-specific requirements are evaluated separately before any client material is accepted. Sensitive defense work must use an independently approved environment and written handling requirements.

Report a concern

To report a website security or privacy concern, email tony@crispx.com. Do not include exploit code, credentials, sensitive data, or client information in the initial message.