Security and client data

• Transport Encryption: All communications with nexorayyc.io are encrypted in transit using modern TLS (HTTPS) protocols.
• Input Validation & Rate Limiting: Web entry points enforce strict payload size ceilings (16KB) and IP-based rate limiting to protect against abuse and automated denial-of-service attempts.
• Multi-Tenant Data Isolation: In enterprise pilot applications such as SummitOS, data separation between distinct organizations is enforced at the database level using PostgreSQL Row-Level Security (RLS) policies keyed to tenant identifiers.
• Human-in-the-Loop Architecture: We design automated workflows so that critical actions, financial commitments, and customer communications require human review and approval prior to execution.

We believe trust requires absolute clarity about our current operational stage:

• NEXORA Technologies Corp. does not currently hold third-party audit certifications such as SOC 2 Type II or ISO 27001.
• We do not claim that any software system is immune to vulnerabilities or “unbreakable.”
• We do not guarantee Canadian-only data residency across all tools by default; specific data residency guarantees are established only where defined in a client's written services agreement.

Where client or marketing workflows integrate third-party AI models (such as Groq or Anthropic APIs), data handling is strictly governed by the developer API terms of that provider. Under commercial developer terms, data submitted via API is not used to train public machine learning models. We disclose all sub-processors involved in a client engagement.

Please do not transmit sensitive personal data—such as health records, government identification numbers, or payment account credentials—through public website contact forms. For projects requiring sensitive data processing, appropriate technical and legal safeguards must be executed in writing beforehand.

If you discover a potential security vulnerability or data exposure in any NEXORA system, please report it immediately to NEXORA Technologies Corp. at growth@nexorayyc.io with technical details. We investigate all credible reports promptly and request that you provide reasonable time to remediate before public disclosure.