EEK's Security Headers Are Now Audit-Grade
EEK deployed HSTS preload, a comprehensive Content Security Policy covering Stripe and CloudFront, and Permissions-Policy headers. The platform meets the standards of regulated financial and legal environments.
Security Infrastructure That Matches the Sensitivity of the Data
EEK processes card payments, holds personal vehicle and customer data, generates legal documents, and handles insurance claims documentation. The platform's security posture needs to match the sensitivity of what it handles.
EEK deployed HTTP Strict Transport Security (HSTS) preload with a one-year max-age on both the apex and www domains — ensuring every browser that has ever visited eekmechanical.com enforces HTTPS permanently. A comprehensive Content Security Policy was configured, covering Stripe's payment frame allowlist and CloudFront media for call recordings. Permissions-Policy headers restrict what browser APIs the site can access.
What This Means for Customers
Every EEK transaction — from viewing your portal to paying your invoice — takes place on a connection that cannot be downgraded to HTTP, on a page that cannot load content from unauthorised sources, on a site that cannot be manipulated by malicious scripts. These are not visible to users, but they are the infrastructure that makes EEK safe to use for payment and sensitive personal data. The configuration now meets the standards expected of regulated financial and legal service environments.
Related Articles
The EEK Procedure Standard (EPS): OEM Spec + Our Copyrighted Process
Every EEK job requires Manufacturer Specification (OEM Spec) and EEK Procedure Standard (EPS) (Policies §19). Here is what that means for insurers, customers, and workshops.
EEK's Transparent Pricing: No Hidden Costs for Misfuel Recovery
EEK Mechanical publishes clear pricing with detailed invoices and line items. Know exactly what you're paying for misfuel recovery services.
EEK Serves You in Your Language — and Remembers It
All EEK voice agents can detect language barriers, switch language on request, and store the preference. Every future call from that number starts in your language automatically.