Trust & Security

Last updated: July 27, 2026 Bowtie Network LLC, a Georgia limited liability company, builds trust between schools, boosters, vendors, and national brands. Protecting the data those partners entrust to us is a first-class part of the product. WHAT THIS SITE COLLECTS This marketing site collects only what people submit through contact and partner-inquiry forms, plus standard server logs. It does not host student data, transactional payment data, or protected health information. HOSTING AND INFRASTRUCTURE - The Site runs on a managed edge platform with automatic TLS (HTTPS) on every page. - Our database and file storage are provided by a SOC 2 Type II certified managed backend provider hosted in the United States. - Backups are managed by the backend provider on their published schedule. ACCESS CONTROLS - Administrative access to content, bios, and partner records requires authenticated login. - Row-level security policies are enforced at the database, not just the application. - Admin roles are granted through a dedicated user_roles table and reviewed periodically. DATA IN TRANSIT AND AT REST - All traffic is encrypted in transit with modern TLS. - Data at rest is encrypted using disk-level encryption provided by our hosting and database vendors. - Secrets and API keys are stored in a managed secrets store, not in source code. APPLICATION SECURITY PRACTICES - Input on public forms is validated with a schema library before it reaches the database. - We use security-definer database functions for privileged role checks to prevent privilege-escalation via row policies. - Dependencies are kept current and monitored for known vulnerabilities. INCIDENT RESPONSE If we confirm a security incident affecting personal information you submitted, we will notify affected individuals and, where required, regulators, in accordance with applicable law. REPORTING A VULNERABILITY We appreciate responsible disclosure. Please email security@bowtieschoolpartners.com with: - a description of the issue and affected URL, - steps to reproduce, - any proof-of-concept, and - how you would like to be credited (optional). Please do not access data that is not yours, and give us reasonable time to investigate and remediate before public disclosure. CONTACT - Security: security@bowtieschoolpartners.com - Privacy: privacy@bowtieschoolpartners.com