ZelixAI is built with security at its foundation. From a separate database per customer to storage in the EU: we handle and store your data and your customers' data with care.
Your data secure. Your trust earned.
An overview of the measures we take, and where their limits are.
We process personal data in line with the GDPR, with privacy by design as our principle. Every customer gets a data processing agreement; the text is currently under legal review. You delete and export customer data yourself in the portal.
Every customer gets their own database for conversations and the knowledge base. What we keep centrally, such as the inbox overview, is not visible to other customers.
We store API keys, passwords of connected services and other sensitive fields encrypted with AES-256-GCM. All connections to the platform are encrypted over HTTPS.
Protect your account with two-factor authentication: a code from an authenticator app (TOTP) or by email. Once you turn it on, we ask for that second step at every login.
With separate permissions per area and your own roles, you decide who can do what within your ZelixAI environment.
We believe in honest AI. Your bot makes clear from the first message that it is a bot, not a human.
Fixed platform rules in every bot, filtering of knowledge-base text for known injection patterns, and an abuse check on messages.
The database with conversations, knowledge base and accounts runs on our own servers in the Netherlands. Files and backups are kept in France. AI processing can take place outside the EU, unless you switch on EU-only.
We use CSRF tokens in the portal, a Content Security Policy and HSTS, plus headers against clickjacking.
Detailed documentation of our security controls, practices and policies for enterprise prospects and compliance teams.
Encryption algorithms, backup schedules, access control, audit logging and our vulnerability management cycle.
How to report a vulnerability, our 90-day coordinated disclosure policy and our hall of fame for recognised researchers.
We process personal data with attention to the GDPR
Database on our own servers in the Netherlands
Encrypted storage of keys and passwords
Measures against common web attacks
Everything you want to know about how we handle your data.
Discover what ZelixAI can do for your business. Start free — no payment details required, no obligations.
Start free → →