🛡

Security at ZelixAI

We protect every account with encrypted connections, encrypted storage of sensitive fields, storage in the EU, role-based access control and a policy for reporting vulnerabilities.

🔐

AES-256-GCM

Sensitive fields encrypted

🔒

TLS 1.2/1.3

Encryption in transit

🇪🇺

Storage in the Netherlands and France

👥

RBAC

Role-based access control

📊

AVG/GDPR

Processing under the GDPR

Trust Center

Detailed documentation of our security controls, practices and policies for enterprise prospects and compliance teams.

🛠

Security Practices

Encryption algorithms, backup schedules, access control, audit logging and our vulnerability management cycle.

📝

Responsible Disclosure

How to report a vulnerability, our 90-day coordinated disclosure policy and our hall of fame for recognised researchers.

📜

Privacy & GDPR

Data categories, sub-processors, legal basis for processing, retention schedules and data-subject rights under the GDPR/AVG.

🚩

Report illegal content

Saw content through ZelixAI that you think is illegal? Report it with the form. We assess every report within 24 hours.

🔒

A database per account

Every account has its own database. What we keep centrally is filtered per account; what you store is not visible to other customers.

📱

Two-Factor Authentication

Two-factor authentication with an authenticator app (TOTP) or a code by email. Each user turns it on in their account settings.

Questions about our security posture?

Our security team is available to answer compliance questionnaires and enterprise due-diligence requests.

Contact security team →