Thuellai website · Version 1
Security
Last updated: October 16, 2026
Use this page to understand the scope of the presentation website, follow safer access practices, and report a concern. It is not an independent security certification or an application security audit.
Presentation site and official app
This website explains Thuellai and links to the application at login.stormthuellai.com. It does not ask for a password, authentication code, payment card, or private investigation document. Check the destination before signing in. Use the HTTPS address of the official app or the secure invitation issued for your organization.
Protect your access
Keep credentials and invitation links private. Do not share authentication codes or allow others to use your account. Follow the access and security requirements set by your organization. If you suspect an account or invitation has been exposed, contact your organization administrator or Thuellai representative promptly.
Use appropriate channels for sensitive files
Do not send passwords, payment information, personal identifiers, or private claim files through an ordinary website inquiry. Use only the authorized application workflow or a secure channel agreed with your organization and Thuellai. Weather-source links and external websites operate under their own policies.
Report a suspected issue
Report a suspected vulnerability, suspicious invitation, or access problem to your organization administrator or the Thuellai representative who provided access, and ask for it to be routed to the security contact. Include the affected URL, approximate time, browser, and non-sensitive reproduction steps. Do not access another person’s data or perform disruptive testing to demonstrate the issue.
Security information and limitations
The demo request endpoint validates submissions on the server, limits request size, checks the website origin, and uses a honeypot and provider-side idempotency to deduplicate retries of the same request. Email credentials are stored server-side and are not included in the browser code. Language and accessibility settings are stored locally. The app and hosting services have separate controls. This page does not claim an independent audit or security certification.
Read in English or Spanish using the language control above.