Data Security Policy

Zerix is committed to maintaining the highest standards of information security and data protection for all users. All client data is stored in Supabase databases hosted on Amazon Web Services (AWS) within the EU (Ireland region), ensuring compliance with UK GDPR and EU data residency requirements.

Key controls include:

• AES-256 encryption at rest and TLS 1.2+ encryption in transit.
• Automated daily backups, retained for 30 days and securely stored within the same region.
• Access controls and role-based permissions applied to all accounts.
• Multi-factor authentication (2FA) enabled for administrative and developer accounts.
• Regular security patching and dependency monitoring on all hosted environments.

Zerix never sells, shares, or transfers client data to any third parties without explicit consent or lawful basis.