What we built, and what we did not
A website built for the present and prepared for the future. Security, privacy, performance, and intelligence — all at the highest standards.
This website is not a digital brochure. It's a platform built with the same attention to detail we expect from the medical equipment we distribute.
Every technical decision was made with a clear purpose: to provide an exceptional experience for users, to respect the strictest privacy standards, and to be prepared for how people will search for information in 2026 and beyond.
The following sections document what we built and why. For auditors, partners, stakeholders, and anyone who wants to see what a professional website means in the AI era.
Security Without Compromise
Security is not a feature you add at the end. It's the foundation on which everything is built. Every interaction on this site is protected by multiple layers of defense.
Layered Anti-Spam Protection
Protection systems work invisibly for real users while effectively blocking automated attacks and spam.
Secure Transport
All connections are encrypted. No mixed content, all resources are served securely.
Security Headers
Advanced configurations protecting against common attacks: XSS, clickjacking, MIME sniffing, and more.
Zero Technical Exposure
Error messages never reveal technical details. Users see clear messages, attackers get no useful information.
Note for auditors: This site implements OWASP security best practices for static web applications, including complete security headers and protection against common attacks.
Privacy and GDPR
GDPR is not an administrative burden. It's a promise to users that their data is treated with respect. This promise is integrated into every aspect of the site.
Real Consent, Not Theatre
The banner respects the visitor's choice. Verified on a clean browser: on reject, no cookie is set and no third-party script loads. This was not the case until 25 August 2026, and the audit found and fixed it.
Google Consent Mode v2
Complete implementation of the Google standard for 2024+. Analytics and marketing granularly respect user preferences.
Complete Documentation
Privacy, cookie, and terms policies — all available in Romanian and English, updated and compliant with ANSPDCP.
Explicit GDPR Rights
Access, rectification, erasure, portability — all rights are clearly documented with concrete procedures for exercise.
ANSPDCP Compliance: All privacy policies comply with the requirements of Romania's National Supervisory Authority for Personal Data Processing, with specific details about user rights and exercise procedures.
User-Centered Experience
A professional website doesn't mean a complicated website. It means a website that makes things simple for those who use it. Every interaction detail has been thought from the user's perspective.
Real Mobile-First
Design starts from mobile. The contact form appears first on phones, not after endless scrolling.
Immediate Feedback
Every action has visual response. Buttons confirm clicks, forms show progress, errors are clear.
Intuitive Architecture
Predictable navigation. Users find what they're looking for in maximum 2-3 clicks, regardless of entry point.
Human Tone
Error messages don't blame. Empty states explain and guide. The site speaks like a trusted colleague.
Benchmark-Level Performance
Speed is not a luxury. It's respect for users' time and a critical factor for SEO. This site is optimized for Core Web Vitals — the real metrics Google uses for ranking.
Optimized Core Web Vitals
LCP under 2 seconds, CLS near zero, INP under 100ms. Real metrics tested on real devices and networks.
Next-Generation Images
WebP format, explicit dimensions for visual stability, lazy loading for below-fold content.
Optimized Code
Minimal JavaScript, no render-blocking, third-party scripts loaded only after consent.
Pre-generated Pages
Pages are generated at build time and served from cache behind a CDN. Form routes run on the server, because they send email and write to the CRM.
Our working targets are the ones Google recommends: LCP under 2.5 seconds, CLS under 0.1, and INP under 200 ms. We do not display a Lighthouse score, because the same page can score differently across successive runs depending on network and device. A fixed number here would be a promise we cannot back.
SEO and Organic Visibility
SEO in 2026 is no longer about tricks and repeated keywords. It's about providing valuable content in a form that search engines can understand perfectly.
Semantic Structure
Correct heading hierarchy, semantic HTML, accessibility first. Search engines understand the content perfectly.
Complete Hreflang
Every page has an equivalent in both languages, with correct signaling for Google. Zero confusion, zero duplicate content.
Rich Structured Data
Schema.org implemented for Organization, Products, Services, FAQ, Events, Breadcrumbs. Rich snippets in results.
Sitemap and Indexing
Auto-generated XML sitemap, optimized robots.txt, canonical URLs on every page. Predictable indexing.
Ready for the AI Era
Search is transforming. ChatGPT, Claude, Perplexity, Google Gemini — people ask AI before they search on Google. This site is optimized to be understood, cited, and recommended by AI systems.
llms.txt for AI
Dedicated file for AI systems: structure, key URLs, FAQ, statistics. ChatGPT, Claude, Perplexity understand the site instantly.
Semantic API
data.json endpoint with all company information in Schema.org format. Machines read like humans.
Factual Content
Verifiable claims, specific numbers, cited sources. AI can extract and cite with confidence.
Epistemic Humility
Content acknowledges limitations, uses nuanced language. AI systems appreciate honesty, not hyperbole.
GEO (Generative Engine Optimization): This concept, new in 2026, means optimizing content to be understood and cited by generative AI engines. The aEstet site implements all recommended practices: clear structure, structured data, verifiable claims, and dedicated endpoints for machines.
Complete Bilingual Architecture
Romanian and English. Not automatic translation, but adapted content. All 33 pages exist in both languages. Blog articles are Romanian only for now.
Localized, Not Translated
The English version is not a literal translation. It's cultural and linguistic adaptation for an international audience.
Native URLs
Each language has URLs in that language: /servicii/ in Romanian, /en/services/ in English. Natural for users and SEO.
Independent Metadata
Title, description, Open Graph — all localized separately. No page inherits metadata from another language.
Parity on Pages, Not on the Blog
All 33 pages exist in both languages, each with its own metadata. Blog articles are Romanian only for now, and the English blog index lists the Romanian ones.
Tools and Features
Beyond informational pages, this site offers useful tools for industry professionals: calculators, comparators, educational resources, and an intelligent contact system.
ROI Calculator
Interactive tool that calculates equipment investment return. Personalized input, instant results.
Buy vs Rent Comparator
Detailed analysis for the purchase or rental decision. Multiple scenarios, data-based recommendations.
Blog with 20+ Articles
Educational content for professionals: guides, trends, case studies. Each article optimized for AI extraction.
Intelligent Contact System
Automatic lead scoring, complete validation, instant confirmation. Every message is prioritized and routed correctly.
Solid Infrastructure
A professional website needs solid foundations. The architecture, deployment processes, and code practices are at enterprise level.
Modern Deployment
- Static export for maximum speed
- Global CDN for minimum latency
- Zero downtime on updates
- Instant rollback if needed
Quality Code
- Strict TypeScript for safety
- Automatic linting and formatting
- Reusable components
- Modular and extensible architecture
Monitoring and Maintenance
- Automatic sitemap and RSS generation
- Link and resource verification
- Periodic security updates
- Complete technical documentation
Why All This Matters
A website is not just a digital business card. It's the first contact many potential clients have with the company. It's proof that the professionalism we promise is reflected in everything we do.
When a doctor or clinic owner sees this site, they should instantly understand they're working with a company that takes seriously every detail — from the equipment we distribute to how we present ourselves online.
This site is built with the same rigor we have for the medical equipment we distribute: nothing left to chance, everything with purpose.
What the audit found
An audit page that lists only successes is not an audit. Below: what was found wrong on 25 August 2026, what has been fixed, and what is still in progress.
Fixed
- Meta Pixel and Hotjar loaded even after cookies were rejected. They no longer start without explicit consent.
- Security headers were entirely absent in production, because the config file had been written for a different hosting type.
- The public service status route disclosed the name of the company email account.
- Forms had no server-side limit, so anyone could subscribe someone else's address to the newsletter.
- The free-text AI module in the configurator was removed, because it sent what visitors wrote to a provider outside the EU.
- The registered office shown was wrong. The correct address is in Galati, verifiable at the Trade Register.
- The testimonials on the home page were invented. They were replaced with information you can verify yourself.
In progress
- Rewriting the privacy and cookie policies, naming every processor and explaining lead scoring.
- Moving the content security policy from report mode to blocking mode.
- Email confirmation for newsletter sign-up, instead of single-step subscription.
- Storing consent evidence on the server, not only in the visitor's browser.
- Translating the blog articles into English.
Data protection officer: Gabriel Ursan, gabriel.ursan@gmail.com. This page was last updated on 26 August 2026.
Explore the Website
Now that you know what's behind this site, we invite you to explore it. Discover the products, services, and resources we've prepared for medical aesthetics professionals.
- Intuitive and fast navigation
- Complete equipment information
- Educational resources for professionals
- Direct contact and quick response
Last updated: 26 August 2026
This audit document is intended for stakeholders, partners, and auditors. For technical questions, contact the aEstet team.