AI chatbot security: how ZelixAI protects your data

ZelixAI is built with security at its foundation. From a separate database per customer to storage in the EU: we handle and store your data and your customers' data with care.

Security bunny

Your data secure. Your trust earned.

How we protect your data

An overview of the measures we take, and where their limits are.

📜

GDPR and privacy

We process personal data in line with the GDPR, with privacy by design as our principle. Every customer gets a data processing agreement; the text is currently under legal review. You delete and export customer data yourself in the portal.

🔒

A database per customer

Every customer gets their own database for conversations and the knowledge base. What we keep centrally, such as the inbox overview, is not visible to other customers.

🔐

AES-256 Encryption

We store API keys, passwords of connected services and other sensitive fields encrypted with AES-256-GCM. All connections to the platform are encrypted over HTTPS.

📱

Two-Factor Authentication

Protect your account with two-factor authentication: a code from an authenticator app (TOTP) or by email. Once you turn it on, we ask for that second step at every login.

👥

Granular Permissions

With separate permissions per area and your own roles, you decide who can do what within your ZelixAI environment.

👁

AI Transparency

We believe in honest AI. Your bot makes clear from the first message that it is a bot, not a human.

🛡

Prompt Injection Protection

Fixed platform rules in every bot, filtering of knowledge-base text for known injection patterns, and an abuse check on messages.

🇪🇺

European Hosting

The database with conversations, knowledge base and accounts runs on our own servers in the Netherlands. Files and backups are kept in France. AI processing can take place outside the EU, unless you switch on EU-only.

🛠

CSRF, CSP, HSTS

We use CSRF tokens in the portal, a Content Security Policy and HSTS, plus headers against clickjacking.

🛡

Trust Center

Detailed documentation of our security controls, practices and policies for enterprise prospects and compliance teams.

🛠

Security Practices

Encryption algorithms, backup schedules, access control, audit logging and our vulnerability management cycle.

📝

Responsible Disclosure

How to report a vulnerability, our 90-day coordinated disclosure policy and our hall of fame for recognised researchers.

The facts at a glance

🔒

GDPR and privacy

We process personal data with attention to the GDPR

🇪🇺

Hosted in NL

Database on our own servers in the Netherlands

🔐

AES-256

Encrypted storage of keys and passwords

🛠

CSRF, CSP, HSTS

Measures against common web attacks

Frequently asked questions about privacy

Everything you want to know about how we handle your data.

The database with conversations, knowledge base and accounts runs on our own servers in a Dutch data centre. Uploaded files and backups are kept in a data centre in France. AI processing can take place outside the EU, for example in the United States. Don't want that? Switch on EU-only, available from Plus.
Yes. Every customer gets a data processing agreement as soon as we process personal data for you. The text is currently under legal review.
Chat conversations are in your own database, accessible to your team and not to other customers. If you end your account, we delete your conversations on request; backups expire according to their retention period.
No. Your conversations and knowledge base are not used to train AI models, not even by the AI providers we use. Your bot only draws on your own knowledge base and documents.
If an end customer asks to be deleted, you do this with one click and a confirmation in the portal. We remove the records linked to that customer from your database. Our audit log keeps a record that the deletion took place, and backups expire according to their retention period. This supports the right to erasure.

Ready to get started?

Discover what ZelixAI can do for your business. Start free — no payment details required, no obligations.

Start free → →