Security & Compliance

Platform security

All TraffiWork properties and the systems we build for clients are served over TLS with modern cipher suites. Application secrets are held in managed environment stores, never in source control, and access to production systems is limited to named engineers using multi-factor authentication.

Data handling

Publisher applications and agency inquiries submitted through this site are transmitted over an encrypted connection to our form processor and delivered to info@coreleadmedia.com. We collect only the fields shown on the form, retain them for as long as the partnership or inquiry is active, and do not sell personal information.

Engineering standards

• Dependency and vulnerability review before every production release.
• Input validation on both client and server for all submitted data.
• Least-privilege database policies and audited administrative access.
• Automated build, type and lint checks gating every deployment.

Marketing & traffic compliance

Publishers in the TraffiWork / CoreLead Media network agree to promote offers lawfully and truthfully. Incentivized, misleading, trademark-infringing and unsolicited-messaging traffic is prohibited, and applicable consumer-protection and privacy rules — including TCPA and CCPA/CPRA obligations where relevant — must be respected in every jurisdiction a publisher operates in.

Accounts found in breach are suspended, and affected earnings may be withheld pending review.

Reporting a vulnerability

If you believe you have found a security issue in any TraffiWork property, email info@coreleadmedia.com with reproduction steps. We acknowledge reports within two business days and ask that you avoid testing that degrades service or accesses other people's data.