Trust centre
How we look after your data.
DeXMI works with your site’s most important documents and data. This is how we keep them secure, private and under your control.
Your data
Your data stays yours
Documents never used to train models
Your documents are never used to train models, and the AI providers we use don’t train on them either. The decision record (who accepted, amended or rejected what, and on what basis) is captured only under the feedback-data terms in your agreement, and is never shared across companies.
Kept apart from other companies
Every request is checked against your organisation, and your documents are indexed and stored separately from other companies’ data.
Private by default
A conversation is private to the person who started it, and access inside your workspace follows the roles your administrators set.
People make the calls
Every answer shows its sources, and the safety documents the agent drafts stay drafts until the risk owner accepts them.
Hosting
Hosted on AWS
DeXMI runs on Amazon Web Services. Customer data (the application, databases, files, search index and backups) is stored in AWS’s Sydney region.
Search indexing and ranking, and web search where you switch it on, use specialised services in the United States. The subprocessor list below names each one.
Protection
Secure by design
Encrypted in transit and at rest
Connections use TLS 1.2 or higher. Databases, file storage, servers and backups are encrypted with AES-256.
Credentials protected
Passwords are stored only as salted hashes, and the credentials we hold for your integrations are encrypted.
Controlled access
Accounts are by invitation, repeated failed sign-ins lock an account, and deactivating a user or an organisation ends their access immediately.
Resilience
Backed up and recoverable
Continuous backups
Databases are backed up continuously and can be restored to any point in the last 30 days, and uploaded files are versioned.
Restores tested
We test restoring the database, the search index, files and servers from backup, not just taking backups.
Backed up in the same region
Backups stay in AWS Sydney, alongside your data.
Monitoring
Monitored around the clock
Threat detection
Our cloud environment is monitored continuously for threats, and every file uploaded is scanned for malware.
Vulnerability scanning
Every code change, and the production environment every night, is scanned for vulnerabilities.
Audit trail
Sign-ins, account changes and every step the agent takes are logged, so activity can be reviewed.
Availability
Independent checks test the service around the clock, from several locations.
DeXMI Data Core
A connection your administrator controls
Scoped and revocable
DeXMI reaches your Data Core only with a token your administrator issues: read-only unless writing is granted, limited to the modules chosen, set to expire, and revocable at any time.
Proposals, not writes
The agent can only propose changes. One of your Data Core administrators approves each one before anything is written.
If something goes wrong
Incident response and disclosure
Incident response
We maintain a documented incident response plan, and we tell affected customers promptly if a security incident affects their data.
Report a vulnerability
Email security@dexmi.ai. Our disclosure policy offers safe harbour for good-faith research.
Who is responsible
DeXMI is run by DeXMI Pty Ltd (ACN 701 953 764). Privacy questions go to privacy@dexmi.ai.
Subprocessors
The services that handle your data
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, storage, backups, email, and the AI models (AWS Bedrock) | Sydney; search ranking in the United States |
| Qdrant | Search index | AWS Sydney |
| OpenAI | Search indexing | United States |
| Brave Software | Web search, where you switch it on | United States |
For your security team
Security documentation on request
We share our security overview, policies and completed security questionnaires with customers and prospective customers. Email security@dexmi.ai, or ask during your walkthrough.