Security
Security and privacy by design
HilexX is being built for professional businesses that handle sensitive client information. This page describes what is in place today — not what we hope to have in place later.
Release-stage notice
HilexX is currently in beta. Our security, privacy and governance controls will continue to mature before general release. We do not hold ISO or SOC 2 certification, we do not publish an uptime guarantee, and we do not make claims about hosting region, encryption at rest or backup frequency that we have not verified and documented.
Secure access
Access to HilexX requires an authenticated account. Sessions are controlled by the application and access is scoped to the account that created or was granted the record.
- Authenticated access to the application
- Controlled user sessions
- Role-aware access where implemented
- Secure application delivery over managed cloud infrastructure
Data in transit
The website and the application are served over HTTPS, and connections between the browser and our services are encrypted in transit.
- HTTPS across the marketing website and the application
- Encrypted connections between the browser and our services
- Modern transport security provided by our hosting platforms
Privacy-conscious design
HilexX is designed to minimise unnecessary exposure of business information. We collect what is needed to provide the service and make access to it deliberate rather than incidental.
- Only the information needed to deliver the service is collected
- Business records are scoped to the account that owns them
- Website enquiry records are stored server-side and are not publicly readable
- No advertising or invasive tracking scripts on this website
Reliability
HilexX runs on managed cloud infrastructure with version-controlled releases. Our operational practices are appropriate to the platform's current release stage and will continue to develop.
- Cloud-based deployment
- Version-controlled releases
- Monitored production services
- Backup and recovery processes appropriate to the current release stage
Artificial intelligence
How we think about AI
AI assistance is useful only if it is predictable and appropriately scoped.
AI features are designed to process only the information required to assist with a requested task. Specific AI providers and data-processing terms may vary as the platform develops and will be documented before general release.
AI output is assistive. It supports professional judgement and does not replace it, and it should always be reviewed before it is relied upon or sent to a client.
Responsible disclosure
If you believe you have found a security issue in HilexX or on this website, please tell us before disclosing it publicly. We will acknowledge your report and keep you informed while we investigate.
You can also use the contact form and select “Security enquiry”. Please include enough detail for us to reproduce the issue, and please do not access, modify or retain data that is not your own.