EEK's Security Headers Are Now Audit-Grade
EEK deployed HSTS preload, a comprehensive Content Security Policy covering Card and CloudFront, and Permissions-Policy headers. The platform meets the standards of regulated financial and legal environments.
Security Infrastructure That Matches the Sensitivity of the Data
EEK processes bank-transfer payments, holds personal vehicle and customer data, generates legal documents, and handles insurance claims documentation. The platform's security posture needs to match the sensitivity of what it handles.
EEK deployed HTTP Strict Transport Security (HSTS) preload with a one-year max-age on both the apex and www domains — ensuring every browser that has ever visited www.eekmechanical.co.uk enforces HTTPS permanently. A comprehensive Content Security Policy was configured, covering embedded media from CloudFront for call recordings for call recordings. Permissions-Policy headers restrict what browser APIs the site can access.
What This Means for Customers
Every EEK transaction — from viewing your portal to paying your invoice — takes place on a connection that cannot be downgraded to HTTP, on a page that cannot load content from unauthorised sources, on a site that cannot be manipulated by malicious scripts. These are not visible to users, but they are the infrastructure that makes EEK safe to use for payment and sensitive personal data. The configuration now meets the standards expected of regulated financial and legal service environments.
Related Articles
Published Pricing and Invoice Transparency at EEK Mechanical
How EEK Mechanical keeps misfuel recovery pricing clear, itemised and predictable, from vehicle collection to workshop recovery.
How EEK Vets and Monitors Workshop Partners Across the UK
A look at how EEK Mechanical selects and audits GBIFDA-certified workshops to keep misfuel recovery safe and consistent nationwide.
How EEK Handles Misfuel Recovery: Review, Documentation, and Clear Communication
A clear look at how EEK Mechanical manages misfuel recovery through structured review, itemised documentation, and clear written communication.