TRUST CENTER
Security, Privacy & Platform Trust
SecuryxAI is a control-first GRC platform built on multi-tenant isolation, role-based access control, immutable audit logging, and Postgres row-level security enforced beneath the application layer. Every org-scoped query is resolved from the authenticated session, never from client input. Evidence and documents are stored as references, never raw content, in our database; all connections use TLS. Questionnaire intelligence runs entirely on our own servers against an org's own control library — no customer data is sent to external AI APIs for processing.
Framework coverage will appear here once SecuryxAI has implemented and verified security controls.
Subprocessors
Third-party sub-processors used in the delivery of our services.
| Sub-Processor | Purpose | Data Accessed | Region |
|---|---|---|---|
| Stripe | Payment processing and subscription billing | Billing and payment information | US |
| Supabase | Managed PostgreSQL database hosting | All application data | US |
| Vercel | Application hosting, serverless compute, and document storage (Vercel Blob) | Application infrastructure; encrypted document storage | US |
Last updated October 21, 2026