Role-based access
Five roles (administrator, risk manager, analyst, requester and viewer) decide who can see and change what. API keys are scoped by role in the same way.
Trust and security
What we can state about security today.
This page lists only what is true of the product now. Items in square brackets are still being finalised and will be published here; we will not describe them until they are.
In the product today
Audit trail
Decisions and changes are logged with who made them and when. The audit trail exports to CSV or JSON with the other registers.
Encrypted AI provider keys
When you connect your own AI provider, its key is encrypted with AES-256-GCM.
Personal data removed before AI calls
Personal data is removed before any request goes to an AI model. AI outputs are labelled and kept in a usage log, and a person makes the decision.
See how the AI is governedUAE cloud region
NexaPair can be deployed in a cloud region inside the UAE, so your records can stay in the country.
Signed webhooks
Each webhook carries an HMAC-SHA256 signature with a timestamp, so your systems can reject anything that was not sent by NexaPair.
See the verification codeBeing finalised To be confirmed
We will publish these here. Until then, ask us and we will answer in writing.
| Item | Status |
|---|---|
| Certifications | [CERTIFICATION STATUS] |
| Hosting provider and region | [HOSTING PROVIDER] |
| Encryption at rest and in transit | [ENCRYPTION AT REST AND IN TRANSIT DETAILS] |
| Latest independent penetration test | [PEN-TEST DATE] · [PEN-TEST FIRM] |
| Sub-processors | [SUB-PROCESSOR LIST] |
| Data processing agreement | [DPA TEMPLATE] |
| Data retention and deletion | [DATA RETENTION POLICY] |
This website
- The walkthrough, the demos, the format checks and the maturity self-assessment run in your browser and send nothing to us.
- This site's pages include no analytics or advertising scripts. Its fonts come from Google Fonts.
- Until launch, the demo request form does not send your details anywhere.
Doing due diligence on us?
We will complete your security questionnaire. Write to us at
[SECURITY CONTACT]