Trust Center

This site sends a Content-Security-Policy scoped to zero third-party origins, plus X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and Strict-Transport-Security headers on every response. Dependency scanning (`pnpm audit`) found 0 vulnerabilities across 759 dependencies as of the last check. No secrets exist in this repository or in any client-side bundle — verified repeatedly, not assumed.

Honestly: the /admin Website Intelligence dashboard has no authentication yet. It is excluded from search indexing (robots.txt + page-level noindex), but that is not the same as access control, and it will not be deployed publicly until real authentication exists.

No certification (ISO 27001, SOC 2, or similar), penetration-test result, or uptime SLA is claimed — none exists yet. This page will be updated the moment any of that changes, not before.

NexBixi collects personal information only when you submit it directly through a form on this site, and does not sell or share it with third parties. This site uses Google Analytics 4 via Google Tag Manager for aggregate usage analytics — non-essential storage stays denied by default (Google Consent Mode v2) until you explicitly accept it through the cookie consent banner, and you can reject or withdraw at any time from "Cookie settings" in the footer. No advertising or ad-personalization technology is used.

NexBixi Intelligence is built around human oversight as a structural property, grounded answers with stated uncertainty, and a hard architectural boundary between the public Ask NexBixi assistant and any authenticated customer data. No autonomous engineering decisions or safety-critical automated actions are made by NexBixi AI.

Today, form submissions on this site are validated server-side and then discarded — nothing is written to a database, sent to an email provider, or logged beyond a server console line noting that a submission was received (see the honest "not actually sent" state shown after submitting any form). This is a deliberate, temporary state while no email/CRM provider is connected, not a hidden default.

This site targets WCAG 2.2 AA. Automated Lighthouse/axe-core audits score 100/100 across every page tested. No live screen-reader walkthrough has been performed yet — see the full Accessibility Statement for exactly what has and hasn't been verified.

Sustainability is mapped into the NexBixi platform's lifecycle stages, not treated as a decorative footer topic. No ESG scores or certifications are claimed.

This site is built on Next.js/React/TypeScript with a small, deliberately chosen dependency set — no unnecessary UI/animation libraries, no ad tech. The one third-party integration is consent-gated Google Analytics 4 via Google Tag Manager (see Privacy above and the Cookie Policy). Architecture decisions (framework, hosting adapter, repository shape) are recorded as ADRs for transparency.