Your data, protected by design.

Data hosting

Praxiox runs on EU-hosted infrastructure. All production data is stored in data centres located in the European Union. We do not transfer customer data outside the EU unless explicitly requested and contractually agreed.

Encryption

• At rest: All data is encrypted using AES-256 encryption. Database volumes, backups, and object storage are encrypted by default.
• In transit: All connections use TLS 1.2 or higher. We enforce HTTPS across every endpoint with no exceptions.

Access controls

• Role-based permissions: Workspace owners control who can view, edit, or manage projects, documents, and settings. Per-project visibility ensures team members only see what they need.
• Audit logs: Every significant action — logins, permission changes, data exports — is logged with timestamps and user attribution.
• SSO roadmap: SAML-based single sign-on is on our roadmap for Q4 2026. Contact us if SSO is a requirement for your evaluation.

Compliance

We are currently undergoing a SOC 2 Type II audit, with completion expected in Q3 2026. Our infrastructure and processes are designed to meet SOC 2 Trust Service Criteria for security, availability, and confidentiality.

Praxiox is GDPR-compliant by design. We process personal data only as necessary to provide the service, and we support data export and deletion requests.

Backups

Automated backups run daily with a 30-day retention window. Point-in-time recovery is available for database systems. Backups are encrypted and stored in a separate availability zone within the EU.

Incident response

If you discover a security vulnerability or have a concern, please contact us immediately at security@praxiox.com. We acknowledge all reports within 24 hours and aim to resolve critical issues within 72 hours.

For general security questions, reach out to support@praxiox.com or visit our contact page.