Trust
Trust and security
When a client hands Interface a website, they are handing over the public face of their company. We treat that the way an architect treats a building envelope: the part nobody compliments, and the part that cannot fail.
This page describes how client work is protected, in plain terms. If your IT or procurement team needs more, we answer security questionnaires directly. Write to security@ifmm.com.
Where client work runs
Sites we build and operate run on Cloudflare's global network, the same infrastructure behind roughly one in five of the world's websites. Cloudflare maintains SOC 2 Type II and ISO 27001 certifications, published at cloudflare.com/trust-hub. Interface builds on that certified foundation rather than running its own servers.
Sites hosted on Webflow carry Webflow's own SOC 2 attestation, published at trust.webflow.com. Either way, the infrastructure under a client's site is independently audited.
The vendors we build on
Interface deliberately builds on a small set of platforms that publish their own independent audits:
| Platform | Used for | Attestation |
|---|---|---|
| Cloudflare | Hosting, network security | SOC 2 Type II, ISO 27001 |
| Webflow | Site hosting (select clients) | SOC 2 Type II |
| Vercel | Client reporting dashboards | SOC 2 Type II |
| Google Workspace | Email, documents | SOC 2 Type II, ISO 27001 |
| Sanity | Content editing | SOC 2 Type II |
Last reviewed August 2026. When our practices change, so does this page.