DDC Assurance Lab
DDC Assurance Lab is not an accredited laboratory.

Security

Reduce the public attack surface first.

The public DDCAL release is a static site. Administration, client evidence, credentials, and assessment execution are intentionally excluded from this web root.

Public-site architecture

  • No public account registration
  • No public administration endpoint in this release
  • No browser-side JavaScript required for site operation
  • No file-upload endpoint
  • No public assessment evidence store
  • No third-party fonts, analytics, or advertising scripts

Security disclosure

If you believe you have identified a vulnerability affecting ddcal.ca, contact inquiry@ddcal.ca with the subject Security Disclosure.

Please avoid accessing, modifying, retaining, or disclosing data that is not yours. Do not perform destructive testing or create avoidable service disruption.

Administration

The future DDCAL administrative control plane is being designed as a separate authenticated system. It will not be implemented as an ordinary public CMS login attached to this static website.