Trust and security
Public-site protections and review boundaries for AskLib.
Updated
Website controls
HTTPS delivery, browser security headers and a restricted Content Security Policy protect public-site browsing. Contact submissions are validated and use Cloudflare Turnstile. These controls reduce particular risks; they do not establish the security or permissions of every customer environment.
Access and responsibilities
Theme and language preferences are stored in this browser. The marketing site links to the separate AskLib application. That application, patron content, library knowledge sources and authenticated accounts need their own deployment and customer-agreement review. Review authorized roles, source access, credentials and customer responsibilities for the actual environment before granting access.
Tracking boundaries
Google Analytics measures public website visits and interactions through our first-party metrics endpoint after consent. Microsoft Clarity can also be configured; the preferences panel identifies enabled providers. Optional analytics stays unloaded until a valid explicit grant. A versioned, timestamped analytics grant expires after 180 days; malformed, unsupported or future-dated grants do not enable tracking. Existing denials remain effective. Essential only and Allow analytics are equally available, and a failed save keeps analytics off with a message. Cookie preferences and the direct opt-out on Privacy choices remain available. Withdrawal clears accessible analytics cookies and reloads if a tracker has started. Essential preferences remain. Global Privacy Control overrides any analytics permission and prevents a new grant while the signal is active. Choices apply to this browser and site, not automatically to customer accounts, other devices or backend records.
AI and interpretation
No AI model training is performed by the public-site inquiry handler. This statement does not establish how every separate product, customer deployment or independent supplier uses information. Ask for the relevant product data-use terms, model providers and training controls before supplying customer content. Library AI drafts and retrieved answers require human review against current source material; generated content can be incomplete or inaccurate and must not decide patron eligibility or replace professional advice.
Assurance and evidence
This public overview does not assert SOC certification, ISO certification, an independent audit or regulatory compliance. No current assurance report is published here. Request the evidence relevant to your procurement scope; a vendor certification does not certify this business or its products.
Security reporting
Report a suspected issue to [email protected] with the affected URL, impact, time and minimal safe reproduction steps. Do not disclose credentials or customer data. Obtain written authorization before testing a customer environment.