TEICHION WEBSITE — THIRD-PARTY NOTICES ====================================== Site: teichion.com (repository: teichion-site) Publisher: PhronIQ Generated: 2026-09-23 (operations, JOB-0514) Status: Published. This notice describes the live site at teichion.com, public since the 2026-10-07 cutover (JOB-1640). Operations supplies this text; engineering serves it and links it from the footer. This file is not a licence; the site's licence is in the LICENSE file. This site bundles no third-party software, no third-party scripts and no third-party data in the pages it delivers to a browser. It bundles one third-party font family, self-hosted from this origin (see section 3). The review below records that position and the third-party names that appear in the site's copy. -------------------------------------------------------------------------------- 1. WHAT THE SITE DELIVERS -------------------------------------------------------------------------------- The published site is static HTML, CSS, one SVG diagram, one PNG image and the self-hosted Poppins webfont files under /fonts/poppins/, served by nginx. Updated 2026-10-07 (JOB-1558): the site now serves self-hosted Poppins faces (server-side, same origin); the CSP allows them with font-src 'self' and no external font origin. The only binary assets are PhronIQ design assets plus the Poppins faces recorded in section 3. -------------------------------------------------------------------------------- 2. NAMES THAT APPEAR IN THE SITE COPY (descriptive references only) -------------------------------------------------------------------------------- OWASP CRS (Core Rule Set) v4.0.0 Source: https://github.com/coreruleset/coreruleset Licence: Apache License 2.0 How used: named in the site's copy ("Includes rules from OWASP CRS v4.0.0.") to describe a capability of the Teichion WAF product. No OWASP CRS rule file, code or data is distributed by this site. Marks: "OWASP" and "OWASP CRS" are marks of the OWASP Foundation. This reference is descriptive and grants no trademark rights; it is not a claim of sponsorship, endorsement or certification by OWASP. ModSecurity How used: named in the site's copy to describe the kind of rule sets a reader may already maintain. No ModSecurity code is distributed by this site. "ModSecurity" is a mark of its owner; this reference is descriptive and grants no trademark rights. Poppins Source: https://github.com/itfoundry/Poppins Licence: SIL Open Font License 1.1 (OFL-1.1) Author: Indian Type Foundry How used: the site's display typeface, self-hosted as static/fonts/poppins/*.woff2 and served from this origin (assets/scss/_fonts.scss). No third-party font is fetched at page load, and the CSP permits fonts only from this origin (font-src 'self'). Poppins is the shared Kinetic Editorial typeface used across PhronIQ sites, not a Teichion brand asset. The OFL licence text ships alongside the faces at /fonts/poppins/OFL.txt. The reserved font name "Poppins" is not modified. Marks: "Poppins" is a reserved font name of the Indian Type Foundry; this reference is descriptive and grants no trademark rights. Other product and project names that may appear are the property of their respective owners and are used only to identify the products they refer to. -------------------------------------------------------------------------------- 3. FONTS AND DESIGN TOKENS -------------------------------------------------------------------------------- No webfont is fetched from a third party. The page self-hosts the Poppins faces (OFL-1.1, recorded above and in section 2) from this origin, and the body copy uses a system font stack (Inter, Segoe UI and fallbacks). The visual tokens (assets/scss/tokens.scss) are a verbatim copy of PhronIQ's own shared design tokens, not a third-party component. -------------------------------------------------------------------------------- 4. BUILD AND SERVING TOOLS (not delivered to visitors) -------------------------------------------------------------------------------- Hugo, the Sass compiler and nginx build and serve the site. They are tools; they are not part of the artifact a visitor's browser receives. -------------------------------------------------------------------------------- 5. THE PRODUCT'S OWN NOTICES ARE SEPARATE -------------------------------------------------------------------------------- The Teichion WAF product (not this site) does include third-party components, including the OWASP CRS corpus under the Apache License 2.0 and GeoIP data under CC-BY-4.0. Those are covered by the product's own THIRD-PARTY-NOTICES at the waf repository root (JOB-0162), which ships with the software. They are not served by, or part of, this website. -------------------------------------------------------------------------------- 6. CHANGES -------------------------------------------------------------------------------- If any third-party component is added to the site, its licence and attribution are added here first and this file is republished before that component goes live.