Salta al contenuto

[ the works ]

Not demos. Work that is live.

Every work below is online right now, and you can open it. What you cannot see from outside (permissions, payments, personal data, security) is the part that takes us the longest, and the part we get chosen for.

4 works delivered
7 live domains
110k+ people reached
puntoriflesso.com
Punto Riflesso: digital ecosystem realizzato da NosLab, schermata del sito
app.puntoriflesso.com

[ Digital ecosystem ]

Punto Riflesso

A school of advanced bio-natural training. Site, course management and community on a single record: whoever enrols, pays and signs in is the same person, entered once.

  • Site
  • Course management
  • Community
  • Payments
  • AI assistant

Open the site Read the case →

noslab-gsa-pejo.netlify.app
GSA · Grassi Simona Adele: showcase site realizzato da NosLab, schermata del sito

[ Showcase site ]

GSA · Grassi Simona Adele

A digital consultant and photographer in Val di Pejo. The first work to leave the workshop for an outside client, rather than for one of our own.

  • Showcase site
  • Photography
  • Bilingual
  • Val di Pejo

Open the site

elbrenz.eu
El Brenz: cultural ecosystem realizzato da NosLab, schermata del sito
community.elbrenz.eu

[ Cultural ecosystem ]

El Brenz

Safekeeping of Anaunian Ladin, a minority language of the Valli del Noce. Site, searchable archive and community, with Andreas answering those who come looking.

  • Site
  • Archive
  • Community
  • AI assistant

Open the site Read the case →

cristianbresadola.com
cristianbresadola.com: professional site realizzato da NosLab, schermata del sito

[ Professional site ]

cristianbresadola.com

A naturopath and reflexologist. An editorial narrative across three macro-areas, with direct contact: a site that does not ask you to fill in a form to talk.

  • Personal site
  • Editorial
  • Direct contact

Open the site Read the case →

under wraps

Valli del Noce

The fifth work exists, it is being built, and we are saying nothing about it.

The veil lifts in the autumn.

[ no details, for now ]

[ the part you cannot see ]

What holds underneath.

Three things a site built well has and a site built in a hurry does not. They are verifiable: the first two with the browser tools, the third by reading the documents.

[ 01 ]

Functionality

Not pages to look at: things that happen.

  • Card, PayPal and bank transfer payments behind a single interface
  • Collections proof against double charging, guaranteed in the database
  • Quotes and receipts generated as PDFs, numbered without gaps
  • Separate roles and permissions: owner, collaborator, client
  • Apps installable from the browser, with no store in between
  • AI assistants that know the heritage and answer at any hour
[ 02 ]

Security

Verifiable from outside, without taking our word for it.

  • HTTPS enforced, with HSTS extended to subdomains
  • Complete protection headers: framing, sniffing, referrer, permissions
  • Permissions enforced in the database (RLS), not only in the interface
  • Forms defended on four levels: per-IP and per-resource limits, honeypot, minimum time, origin
  • Keys and secrets server-side only, never in the browser
  • Private links with 32 random bytes, not guessable
  • Content Security Policy under test, in report-only mode
[ 03 ]

Compliance

Written by people whose profession is law.

  • Privacy notice and cookie policy validated by a law firm
  • Cookieless analytics: no profiling, no advertising pixel
  • Data hosted in the European Union (Frankfurt)
  • Consent collected explicitly, with a stated purpose
  • Electronic invoicing through the Italian SdI, not spreadsheets
  • Multilingual site declared correctly (reciprocal hreflang)

The seventh security item says “under test” because it is: the Content Security Policy currently reports and does not block. We would rather write it than have you find out.

[ the next one ]

The next work could be yours.

Tell us what you have in mind, even just a sketch. We prepare a detailed quote, with no obligation.

Request a quote See the services