Public and private systems serve different jobs
The public website explains Atherova's services and gives potential customers a way to understand the company. The private CEO Portal is an internal command system and should never be exposed through public navigation.
That separation matters. It reduces confusion, protects sensitive routes, and makes authentication easier to reason about.
How the domains should be deployed
The public site belongs on the primary marketing domain. The private portal belongs on a separate protected subdomain behind login, role-based access, and eventually 2FA.
Public forms can later sync securely to the private portal through server-side APIs. The browser should never receive portal tokens, private routing rules, or internal admin URLs.
Prepared, not exposed
The public website can include hidden internal integration points and robots rules that discourage indexing of internal paths. Those are preparation hooks, not customer-facing access.
Atherova's architecture keeps the public brand polished while preserving a serious internal control model.