Security and trust

What your IT and procurement reviewers will ask, answered

Security, hosting, accessibility, data ownership and support for Cloverleaf Sites and Cloverleaf Applications, in one place. If your agency uses a security questionnaire, we'll complete it.

Security

Automated attacks probe public sites around the clock, and public agencies are frequent targets. A site is no longer something you can stand up and forget.

We update the platform on a regular cadence, not when a breach forces the issue. Cloverleaf monitors security advisories and patches your site within hours of critical releases.

Web Application Firewall protection, brute force prevention and vulnerability scanning are included with every subscription.

Hosting and infrastructure

Every Cloverleaf subscription includes infrastructure optimized for performance, security and reliability. You never have to think about servers.

Cloudflare edge delivery

Global CDN, DDoS protection and intelligent caching. Your site loads fast everywhere, every time.

Automated backups

Daily automated backups with point-in-time recovery. Your content is protected against accidents and disasters.

SSL and encryption

Managed SSL certificates, HTTPS everywhere and encrypted data at rest. Security by default, not by request.

Uptime monitoring

Around-the-clock synthetic monitoring with real-time alerting.

Performance tuning

Database optimization, caching layers, image optimization and asset compression. Tuned for real-world performance, not benchmarks.

Staging environments

Test changes before they go live. Every Cloverleaf subscription includes a staging environment that mirrors production.

Accessibility conformance

Every Cloverleaf layout and component is built to WCAG 2.2 Level AA, the current version of the standard. Accessibility is part of how each component is built and tested before it ships, not a widget or overlay added afterward.

Data ownership and export

Most vendors make switching a rebuild. We don't. Every page, document and image in Cloverleaf Sites, and every application, letter of support, score and award record in Cloverleaf Applications, is exportable at any time at no charge, and we'll help you move. Full content and application data export (JSON and Markdown), database export (SQL), and deployment documentation.

Support and response times

Every Cloverleaf subscription includes uptime monitoring and direct access to specialists who know your configuration, backed by a 99.9% uptime SLA. Cloverleaf Applications support is included with every plan.

Response times depend on your tier. Critical issues are answered within 30 minutes on every tier, during business hours.

Cloverleaf Sites support by tier, set by your operating budget
Under $1M$1M to $10M$10M to $50MOver $50M
SupportEmailEmailEmail and phonePriority
Response time72-hour response72-hour response24-hour response8-hour response, quarterly reviews
Critical issues30 minutes30 minutes30 minutes30 minutes

Reviewing Cloverleaf for your agency?

Send us your security questionnaire and we'll complete it and send it back. Ask us anything this page doesn't cover.

Send us your security questionnaire