🛡

Security at Zelix AI

We protect every tenant with encryption at rest and in transit, EU-only hosting, role-based access control and a formal vulnerability disclosure programme.

🔐

AES-256-GCM

Encryption at rest

🔒

TLS 1.3

Encryption in transit

🇪🇺

EU‑hosted

Netherlands, dev01-aionized

👥

RBAC

Role-based access control

📊

AVG/GDPR

EU privacy-compliant

Trust Center

Detailed documentation of our security controls, practices and policies for enterprise prospects and compliance teams.

🛠

Security Practices

Encryption algorithms, backup schedules, access control, audit logging and our vulnerability management cycle.

📝

Responsible Disclosure

How to report a vulnerability, our 90-day coordinated disclosure policy and our hall of fame for recognised researchers.

📜

Privacy & GDPR

Data categories, sub-processors, legal basis for processing, retention schedules and data-subject rights under the GDPR/AVG.

🔒

Database Isolation

Every tenant runs on its own isolated database with separate credentials. Cross-tenant data access is architecturally impossible.

📱

Two-Factor Authentication

TOTP-based 2FA is mandatory for the owner role. All team members can be required to enrol via the settings panel.

🛡️

Data Sovereignty (BYOD)

Scale and Sovereign tenants can bring their own database hosted on their own infrastructure. We store only connection metadata.

Questions about our security posture?

Our security team is available to answer compliance questionnaires and enterprise due-diligence requests.

Contact security team →