Deploy — host Acta yourself

Acta is a static application. The recommended deployment is your own Cloudflare Pages project: build the site and publish the output. Because it is static, there is no server for you to operate and patch — the app runs entirely in the browser.

Some official legal-source databases cannot be reached directly from a browser. For those, you optionally deploy a small legal-sources Worker on your own Cloudflare account that fetches official law on the workspace's behalf. It carries no client matter content — only requests to public legal databases — and it is operated by you, not by Acta.

Acta ships a strict Content-Security-Policy. When you self-host, you add your own provider and legal-Worker origins to the policy's connect-src — there is a clearly marked insertion point in the headers file and the matching fallback in the HTML. You never widen the policy to a wildcard; you add exactly the origins your deployment uses.

• Acta provides — the software: the static app, the optional legal Worker, the evaluation method, and the verification that keeps citations honest.
• The firm provides — the Cloudflare account, the storage (Drive or OneDrive), the model-provider key, and the identity. The firm holds its own perimeter.