Security

Security at Nexa

Nexa holds finance and operations data for its customers, so security and governance are designed into the platform. This page summarises our approach. Further information is available on request.

Cyber Essentials certification

Nexa AI ERP Ltd holds Cyber Essentials certification. Cyber Essentials is a UK Government-backed scheme, overseen by the National Cyber Security Centre (NCSC) and delivered through IASME, that certifies an organisation’s baseline technical controls against common cyber threats.

The certification applies to Nexa AI ERP Ltd as an organisation, within its assessed scope. It is not a certification of the Nexa ERP product itself.

About Cyber Essentials (NCSC)

Platform controls

How Nexa approaches security

How the platform is designed to control access, record activity and govern AI.

01

Role-based access control

Supports permission models that align users to responsibilities and approval limits.

02

Audit trails

Designed to preserve the history of key actions, changes and approvals.

03

Data encryption

Built with encryption-aware patterns for data in transit and protected application flows.

04

Multi-tenant separation

Designed for separated tenant data boundaries and governed operational access.

05

Approval controls

Supports structured reviews for spend, documents, exceptions and sensitive workflows.

06

Secure AI gateway

Built to mediate AI requests through controlled prompts, source context and guarded outputs.

07

Human approval of AI recommendations

Your team approves, edits or rejects AI recommendations. Actions proposed by AI are carried out only after a user approves them.

08

Privacy-aware handling

Designed for privacy-aware data handling, minimisation and operational accountability.

09

Operational observability

Supports monitoring patterns that help teams detect issues and keep services observable.

Hosting, encryption at rest and backups

Information on hosting, encryption at rest, backup arrangements and sub-processors is available on request for procurement and due-diligence reviews. Email info@nexaai.co.uk.

Talk to us about security

Bring your security questionnaire to a demo and we will walk through the controls that matter to you.