Nexus One Nexus One Trust Center Request a Security Review
NEXUS ONE TRUST CENTER

Your business runs here.
Protecting it comes first.

Nexus One is designed with security, privacy, compliance, responsible AI, access controls, data protection, and continuous monitoring built into the platform.

SECURITY ARCHITECTURE Protected
Node Label Node Meta
Node Label Node Meta
Node Label Node Meta
Node Label Node Meta
Node Label Node Meta
Node Label Node Meta
Node Label Node Meta
Platform Security ✓Operational
Security Review ✓Current
Privacy Review ✓Current
Regulatory Monitoring ✓Active

Last reviewed: October 2026

SECURITY OVERVIEW

Security across the entire Nexus One ecosystem

Nexus One protects more than a website. Businesses may use Nexus One to manage their customers, sales, employees, money, documents, communications, and AI, so protection is applied in layers around every application.

ENCRYPTION · ACCESS CONTROL · MONITORING · BACKUPS Nexus One Platform

Encryption

Secure HTTPS/TLS connections protect supported data while it is transmitted.

Access Control

Role-based permissions help businesses control who can access applications and information.

Secure Infrastructure

Nexus One systems are designed with controlled infrastructure, application security, and monitoring.

Backups

Backup and recovery processes help protect against accidental loss and infrastructure failure.

Monitoring

System health, application activity, authentication, and important security events can be monitored.

Continuous Updates

Security patches, application updates, infrastructure improvements, and vulnerability remediation are part of ongoing platform maintenance.

IDENTITY & ACCESS

Control who can access your business

Give every person their own account and only the access their role requires. Available controls depend on your plan and configuration.

Individual user accounts
Employee access
Administrator permissions
Role-based access control
Department permissions
Application-level permissions
Google OAuth
Connected account controls
User deactivation
API permissions
Integration permissions
ROLE PERMISSIONS · EXAMPLE Configurable
O Owner
→
Full Access
M Manager
→
CRM Employees Reports
S Sales Rep
→
CRM Leads
E Employee
→
Schedule Timesheet
🔒︎https://yourbusiness.com
Customer form
Submitted over encrypted connection
HTTPS Protected
WEBSITE SECURITY

Security built into Nexus One websites

HTTPS / SSL Secure administration Protected customer forms Authentication Domain configuration Application updates Backups Permission-based editing Infrastructure monitoring Secure integrations
DATA PROTECTION & PRIVACY

Protecting business and customer data

D Label D Meta
D Edge
D Label D Meta
D Edge
D Label D Meta
D Edge
D Label D Meta
D Edge
D Label D Meta
D Edge
D Label D Meta
D Edge

Encryption in Transit

Supported communications use HTTPS/TLS.

Controlled Data Access

Business information is accessible based on authentication and permissions.

Data Minimization

Nexus One seeks to avoid collecting unnecessary information.

Retention & Deletion

Data retention depends on customer configuration, service requirements, and applicable obligations.

Read the Nexus One Privacy Policy→
BACKUP & DISASTER RECOVERY

Built to recover

Systems can fail. Security also means being able to restore operations when something goes wrong.

Database Backups

Business records are backed up so they can be restored.

Application Recovery

Applications can be recovered after errors or failed changes.

Infrastructure Recovery

Systems can be rebuilt after infrastructure problems.

Restore Procedures

Defined steps guide how data and services are restored.

Monitoring

System health is watched so problems are noticed early.

Business Continuity

Practices designed to reduce interruption and support recovery.

Recovery capabilities vary by Nexus One plan, deployment, and service configuration.

AI GOVERNANCE

Responsible AI inside Nexus One

AI should help businesses make better decisions—not remove human control.

These principles apply to Bellum AI and the AI functionality across Nexus One applications.

!

AI output should not be considered legal, medical, financial, accounting, cybersecurity, or regulatory advice.

COMPLIANCE

Designed to support changing compliance requirements

Supported / Designed Around

Privacy principles
Access control
Data minimization
Security controls
Customer data rights
Responsible AI
Secure authentication
Data protection

Regulations We Monitor

GDPR
CCPA / CPRA
Florida Digital Bill of Rights
U.S. state privacy laws
CAN-SPAM
AI regulations
Data breach notification requirements
Accessibility requirements
Payment security standards
Authentication and OAuth policy changes

Requires Customer / Enterprise Review

HIPAA
PCI DSS
SOC 2
Financial regulations
Healthcare regulations
Government deployments
Highly regulated data

Using Nexus One does not automatically make an organization compliant with any law, regulation, or certification framework. Compliance depends on the customer's industry, configuration, location, data, processes, and legal requirements.

REGULATORY MONITORING

Regulations change. Nexus One evolves with them.

Nexus One continuously reviews developments that may affect:

Privacy Cybersecurity AI Websites Payments Communications Authentication Cookies Tracking Employee information APIs App platforms Data protection
P Num Monitor
P Num Review
P Num Assess Impact
P Num Update Platform
P Num Update Policies
P Num Communicate Changes
RECENT REVIEW ACTIVITY
October 2026 Security and privacy policies reviewed
October 2026 Authentication and OAuth requirements reviewed
September 2026 AI governance review
September 2026 Infrastructure security review
INCIDENT RESPONSE

When something happens, there is a process.

S Num

Detect

Identify and validate a potential security issue.

S Num

Contain

Limit affected access to reduce impact.

S Num

Investigate

Review affected systems and preserve relevant logs.

S Num

Fix

Remediate the vulnerability or root cause.

S Num

Restore

Bring affected services back to normal operation.

S Num

Notify When Required

Inform affected customers or authorities where legally required.

S Num

Learn

Review the cause and implement corrective measures.

INTEGRATION SECURITY

Connected without giving up control

Nexus One connects to external services using permission-based integrations where supported.

Customers remain responsible for the security of third-party accounts they connect to Nexus One.

Google Payment providers Email providers Communications tools APIs AI providers Business applications
PERMISSION-BASED ACCESS↓
Nexus One
SUBPROCESSORS & VENDORS

Providers that help deliver Nexus One

Enterprise customers may request information regarding relevant subprocessors and data-processing arrangements.

View Subprocessor List · Coming Soon
PROVIDER PURPOSE DATA CATEGORY REGION MORE INFORMATION
Infrastructure provider Hosting To be published To be published —
Payment provider Payment processing To be published To be published —
AI provider AI features To be published To be published —
POLICY CENTER

Policies & Documentation

Privacy Policy

How Nexus One collects, uses, and protects personal information.

Coming Soon

Terms of Service

The terms that govern use of Nexus One services.

Coming Soon

Cookie Policy

How cookies and tracking technologies are used.

Coming Soon

Security Policy

Security, privacy, and compliance practices across the platform.

Coming Soon

Responsible AI Policy

How AI is governed inside Nexus One and Bellum AI.

Coming Soon

Data Processing Addendum

Processor and customer responsibilities for personal data.

Coming Soon

Acceptable Use Policy

Rules for appropriate use of the platform.

Coming Soon

Subprocessor List

Providers that may process data on behalf of Nexus One.

Coming Soon

Vulnerability Disclosure Policy

How to report security issues responsibly.

Coming Soon

Data Retention Policy

How long information is kept and how it is deleted.

Coming Soon
SECURITY CHANGELOG

Security & Compliance Updates

October 2026
Security program review
September 2026
AI governance review
September 2026
Authentication review
August 2026
Infrastructure review
RESPONSIBLE DISCLOSURE

Found a security issue?

We appreciate responsible security research that helps protect Nexus One and our customers.

Do not publicly disclose vulnerabilities that could put customers at risk before Nexus One has had a reasonable opportunity to investigate and remediate them.

ENTERPRISE SECURITY REVIEW

Need a deeper security review?

Organizations with procurement, privacy, security, regulatory, or enterprise requirements can request a Nexus One security review.

TOPICS CAN INCLUDE
Security architecture Infrastructure Access controls Data protection AI processing Data retention Backups Subprocessors DPA requirements Regulatory requirements Security questionnaires Custom deployment requirements
SHARED RESPONSIBILITY

Security is shared

Nexus One protects the platform. Customers should protect how they use it.

Nexus One Responsibilities

Platform infrastructure
Application security
Access control systems
Encryption in transit
Backups & recovery
Monitoring
Vulnerability remediation
Incident response

Customer Responsibilities

Passwords
Administrator accounts
Employee permissions
Google accounts
Email accounts
Domains
API keys
Integrations
Customer consent
Privacy disclosures
Tracking configuration
Sensitive data
AI usage
FAQ

Common security questions

Security isn't a feature we finish.

Technology changes.

Threats change.

Privacy laws change.

AI regulations change.

Nexus One is designed to evolve with them.

One Business. One System. Protected.

Explore Nexus One