← Back
Sellexio · Trust Center

How we protect your data

This page is maintained by Sellexio to answer common security, privacy, and compliance questions about the platform. It reflects controls we operate today. It is not an independent certification.

Accountability and contact

Accountable person
Mike Paul Firth
Founder · Data Protection & Security contact
security@sellexio.co
Registered address
Sellexio
1401 28 St N
Lethbridge, AB T1H 6H9
Canada
Paperwork on your terms
You can sign our mutual NDA online in under a minute — or send yours and we will sign your paper instead. Pilots run on historical, closed files only, so no live operational system is ever touched.

Endpoint security posture

Endpoint protection · Huntress MDR
Protected endpoints
—
Open incident reports
—
Monitored organizations
—

24/7 managed detection & response across Sellexio production workstations and servers. Counts are pulled live from the Huntress Management API; no host names, user identities, or incident details are published.

Security controls

Encryption
TLS 1.2+ in transit, AES-256 at rest across all databases and file storage.
Access control
Role-based (viewer / analyst / comptroller / admin) with row-level security enforced at the database.
Audit logging
Every claim status change, AI run, document upload, and role grant is recorded with actor, timestamp, and immutable hash.
Data residency
Primary in US-East. Enterprise plans can pin to EU-West.
Backups
Point-in-time recovery up to 7 days, daily snapshots retained 30 days.
Uptime target
99.9% for Professional, 99.95% with credit-back for Enterprise.
Vulnerability management
Automated dependency scans on every deploy; Huntress MDR/EDR for endpoint detection; third-party pen test scheduled Q3 2026.
AI safety
All AI outputs marked as advisory. Every call is logged to the AI audit ledger with prompt hash, model, tokens, and latency.
Endpoint protection
Huntress-managed detection & response (MDR) monitors production workstations and servers with 24/7 threat hunting and SOC 2 evidence collection.

Legal documents and reports

DPA + SCCs
Signable DPA including SCC Module 2 and the UK IDTA.
Subprocessors
Public, versioned list with regions and data categories.
Security Q&A
Pre-answered CAIQ-Lite for procurement teams.
Live status
Uptime, autopilot heartbeat, incident feed.
Master Services Agreement
Commercial terms, success-fee model, kill-fee, jurisdiction.
Mutual NDA
Sign online before sharing shipping logs. Mutual, 3-year term.
Pilot Agreement
90-day zero-cost pilot, 20% success fee, no recovery no fee.
Report a vulnerability
security@sellexio.co · 24-hour triage SLA.

Compliance roadmap