Cloudflare infrastructure
The platform runs entirely on Cloudflare's serverless infrastructure.
Security and compliance
Secure by design, built by security professionals
A platform that handles tickets, HR data and privileged access must be secure by design. Here is how exoCortex is, and what is still to be documented.
Your data stays separate, traceable and under control
-
-
Separate data for each customer
Each customer has its own database. One organisation's data never mixes with another's.
-
Access denied by default
Role-based access control: anything not explicitly allowed is forbidden. Multi-factor authentication and your organisation's single sign-on.
-
Traceability
The activity log can be exported. The log of AI agent actions is chained, so any tampering becomes evident.
-
AI under control
Each AI agent has its own permissions and can work in suggest-only mode. Significant decisions stay with a person.
-
Privileged access
Just-in-time access, vaulted credentials and recorded sessions. Agents never see the passwords.
-
Secrets and integrations
Integration credentials are encrypted. Messages exchanged with external systems are signed.
How we process and protect your data
-
GDPR
⟦DA FORNIRE: ruolo privacy (titolare/responsabile), DPA, gestione dei diritti degli interessati⟧
-
Data residency
⟦DA FORNIRE: regione di conservazione dei dati e sub-responsabili⟧
-
Certifications
⟦DA FORNIRE: certificazioni ottenute o in corso, con riferimenti verificabili⟧
This website follows the same rules
-
No tracking
No profiling cookies and no advertising tools.
-
No unnecessary third-party resources
Fonts are hosted on the website itself, with no calls to external services.
-
Strict security headers
Content Security Policy without inline scripts, HSTS and origin isolation.
-
Protected forms
Server-side anti-bot check, rate limits and no personal data in the logs.
Have you found a vulnerability?
Report it to security@ai-exo-cortex.com. Instructions for responsible disclosure are published in security.txt.
Does your security team have questions?
We will arrange a dedicated meeting with your security and privacy leads.