Privacy & Security

Built with security, privacy and human oversight in mind.

Zaxonite IQ processes identity-related digital evidence, so responsible data handling and security are fundamental to how the platform is designed and operated. Zaxonite Systems applies technical and organisational controls intended to protect customer accounts, minimise unnecessary data handling and support responsible use of assessment results.

Our approach

Practical controls throughout the platform.

Security Built In

Security controls are applied across authentication, customer isolation, data handling and external network requests. Production services use encrypted HTTPS connections and access to customer functionality requires authenticated accounts.

Privacy-Minimised Reporting

Zaxonite IQ reports are designed to communicate relevant assessment findings while minimising unnecessary personal information.

Human Oversight

Zaxonite IQ is decision-support technology, not an automated decision-maker. Assessments support professional human judgement and should not be used as the sole basis for significant decisions.

Explainable Evidence

Assessment results are presented alongside relevant findings and context so customers can review the evidence behind the assessment rather than relying on a score alone.

Data handling

Designed to minimise unnecessary retention.

Zaxonite IQ is designed to minimise the persistence of assessment and report data. Generated privacy-minimised assessment reports are held temporarily for a maximum of 30 minutes to support the customer workflow and are not maintained as a permanent customer report archive.

Account, authentication, billing and usage information required to operate the customer service is managed separately from temporary assessment/report handling.

Account & application security

Controls protecting customer access.

Zaxonite IQ applies a range of technical controls to protect customer accounts and application integrity:

Secure password hashing
Server-side authenticated sessions
Session revocation controls
Customer and organisation access isolation
Rate limiting on sensitive authentication functions
Protections against cross-site request forgery
Security controls for outbound website requests
HTTPS and application security headers
Restricted production database access

Payment security

Payments handled through Stripe.

Zaxonite IQ uses Stripe for subscription payment processing and billing management. Zaxonite Systems does not need to collect or store customers' full payment-card details within the Zaxonite IQ application.

Data protection & governance

Responsible operation, not just technical controls.

Zaxonite Systems maintains internal data-protection and governance documentation supporting the operation and development of Zaxonite IQ, including privacy-risk assessment, individual-rights procedures, external-service review, fairness review and controlled change management.

Zaxonite IQ is designed to support human due diligence. Results do not verify or prove a person's identity and should not be used as the sole basis for an employment, engagement or other significant decision.

ICO Registration

Zaxonite Systems Ltd — ICO registration details will be published here following completion of registration.

Contact

Privacy or security enquiry?

For privacy, data-protection or security enquiries relating to Zaxonite Systems or Zaxonite IQ, contact [email protected].