Trust & Security
Governed application controls, evidence integrity, and security assurance for institutional users
Data Protection
Merixia applies tenant-scoped application controls and an evidence-based security assurance programme. External infrastructure and legal assurance are verified separately.
Tenant-scoped access controls with governed role assignments
UK/EU GDPR control mapping and legal review in progress
Tamper-evident evidence and decision lineage
Role- and scope-based authorization with step-up verification
Security testing and production assurance programme in progress
- • UK/EU GDPR controls: implementation and legal assurance in progress
- • ISO 27001: not certified
- • SOC 2: not certified
- • Production security certification: pending authenticated runtime evidence
- • Versioned evidence history
- • Tamper-evident gate decision records and amendment lineage
- • Tenant-scoped user action logging
- • Reproducible score inputs and model provenance
- • Timestamped control evidence
Governance & Audit
Complete audit trails and governance controls designed for institutional accountability.
Tamper-evident decision records
Application audit trails with chained event hashes
Explainable and versioned scoring models
Governed reporting with evidence lineage
Version-controlled gate definitions
Data Rights & Ownership
Customer data rights and ownership are governed by the applicable agreement. Merixia provides scoped export capabilities and a controlled disclosure process for broader requests.
Any benchmarking or model-improvement use of customer data must follow the applicable agreement, approved data-rights policy, and documented anonymisation controls.
Venture and cohort export capabilities are available. Complete privacy-request fulfilment remains a governed process rather than an unrestricted bulk export.
Infrastructure & Hosting
Hosting Region
Provider-region evidence is being collected; no unsupported residency claim is made here.
Backup & Recovery
Provider backup and recovery capabilities require retained assurance evidence before contractual claims are made.
Availability
No uptime SLA is claimed here unless separately agreed and evidenced in contract.
Network Protection
Provider network-security controls require current third-party assurance evidence.
Questions about security or compliance?
Our team can provide documentation, architecture summaries, and security questionnaires on request.
Contact Us