04 — Security

Your data stays yours.

In every system we build, security starts with the first line of code.

Access by role: People see only what their role allows.
Encrypted credentials: Passwords and connection secrets are stored encrypted.
Validated inputs: The server checks every input before use.
Hardened endpoints: Interfaces accept only what they need.
Agents with limits: An AI agent gets no more access than the person it works for.
Never shared: Your data is never shared or resold.

Proof on this page

Claims about this website you can check yourself.

Scripts: only our own. A new security code on each visit stops injected scripts from running.
Trackers and analytics from other companies: none.
Fonts and images: served from datahub.co.tz.
Cookies: none. Your preferences stay in your own browser.
Contact form: checked on our server, limited to a few messages per network address, and filtered for automated spam.

Show the exact policy

The Content-Security-Policy header for this page, with the per-visit code hidden.

default-src 'self';
base-uri 'self';
form-action 'self';
frame-ancestors 'none';
object-src 'none';
img-src 'self' data: blob:;
font-src 'self' data:;
style-src 'self' 'unsafe-inline';
script-src 'self' 'nonce-…' 'strict-dynamic';
connect-src 'self';
worker-src 'self' blob:;
manifest-src 'self';
upgrade-insecure-requests

Check our security headers yourself

From manual and scattered to automated and clear.

Today:
Reports take hours or days
With DataHub:
Reports generated in seconds
Today:
Different people get different numbers
With DataHub:
One answer for everyone
Today:
Files scattered across emails and folders
With DataHub:
One place, in any browser
Today:
Reports formatted and emailed by hand
With DataHub:
Delivered on schedule
Today:
No current view of performance
With DataHub:
Current figures at a glance