# Secure Encryption

> Statement of current practice: wording not yet finalised.

All traffic to this site is served over HTTPS with TLS certificates
that renew automatically. The server behind it is hardened: strict
security headers, a host firewall, and internal services that are not
reachable from the internet.

Future delivery features (client portals, downloads) will be built on
the same encrypted-by-default footing before they go live.