HTTP/2 200 date: Wed, 01 Oct 2025 13:02:42 GMT content-type: text/html; charset=utf-8 content-encoding: gzip cf-ray: 987c27d7bad58087-BLR cf-cache-status: DYNAMIC access-control-allow-origin: * cache-control: public, max-age=0, must-revalidate strict-transport-security: max-age=31536000; includeSubDomains vary: Accept-Encoding content-security-policy: default-src 'self' vanta.com *.vanta.com https://*.chmln-cdn.com;font-src 'self' data: blob: fast.fonts.net vanta.com *.vanta.com fast.ssqt.io fonts.gstatic.com use.typekit.net https://heapanalytics.com https://d1rgrqddsml65q.cloudfront.net https://d9sbxccsd88sv.cloudfront.net https://d260hnksy8ysrs.cloudfront.net https://js.intercomcdn.com https://fonts.intercomcdn.com;media-src 'self' vanta.com *.vanta.com static.zdassets.com dzas9mj7ubt6.cloudfront.net data: https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com;frame-ancestors 'self';frame-src www.browserbase.com cdn.merge.dev embedly-cdn.trychameleon.com fast.trychameleon.com vanta.chilipiper.com vanta.com *.vanta.com 'self' *.oneschema.co blob: https://duploservices-prod01-exports2-415703579972.s3.amazonaws.com www.youtube-nocookie.com www.youtube.com player.vimeo.com www.loom.com https://js.stripe.com https://sandbox.embed.apollographql.com/ https://challenges.cloudflare.com https://apply.vouch.us https://auth.vouch.us/ https://quote.vouch.us/ https://intercom-sheets.com https://www.intercom-reporting.com https://fast.wistia.net;img-src 'self' blob: data: *;script-src 'report-sample' 'sha256-osdn/rXVHx/iMWOvfTH17BBePiGX4wtA1lZ5kpmSpPA=' 'sha256-wKLEQt0qCaDkhGb5ymA2ABfHR98sO+G5vw/1EYiKDAk=' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https:;style-src 'self' https: 'unsafe-inline' https://fonts.googleapis.com https://fonts.google.com cdn.jsdelivr.net fast.fonts.net;object-src 'none';connect-src * data:;child-src blob: 'self' vanta.com *.vanta.com;report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub043e3a57772658a58a4bb910ce747aa1&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:prod%2cservice:web%2cversion:e5347104ce4e01df9d08b0d68abbd4e3a4f42ff8;report-to csp-endpoint;base-uri 'self';block-all-mixed-content; nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} referrer-policy: strict-origin-when-cross-origin report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tgtrG1oZWvV5g2ipXYpTIwBfpKPWLc%2FYIbPjjU44hiDdDJZC3nreA4NjpHl933vDR5xmXNFQK3G8JsgFlQg7KLMlT%2FRQyIMfUII3IUaw8%2FTHbRH6ec4K7EpGWPOJEDnzvFS463kV4iUBvaDa1jOA"}],"group":"cf-nel","max_age":604800} reporting-endpoints: csp-endpoint="https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub043e3a57772658a58a4bb910ce747aa1&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:prod%2cservice:web%2cversion:e5347104ce4e01df9d08b0d68abbd4e3a4f42ff8" timing-allow-origin: https://app.vanta.com, https://app.eu.vanta.com, https://app.aus.vanta.com x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none server: cloudflare