Role-based access control
Supports permission models that align users to responsibilities and approval limits.
Nexa holds finance and operations data for its customers, so security and governance are designed into the platform. This page summarises our approach. Further information is available on request.

Nexa AI ERP Ltd holds Cyber Essentials certification. Cyber Essentials is a UK Government-backed scheme, overseen by the National Cyber Security Centre (NCSC) and delivered through IASME, that certifies an organisation’s baseline technical controls against common cyber threats.
The certification applies to Nexa AI ERP Ltd as an organisation, within its assessed scope. It is not a certification of the Nexa ERP product itself.
How the platform is designed to control access, record activity and govern AI.
Supports permission models that align users to responsibilities and approval limits.
Designed to preserve the history of key actions, changes and approvals.
Built with encryption-aware patterns for data in transit and protected application flows.
Designed for separated tenant data boundaries and governed operational access.
Supports structured reviews for spend, documents, exceptions and sensitive workflows.
Built to mediate AI requests through controlled prompts, source context and guarded outputs.
Your team approves, edits or rejects AI recommendations. Actions proposed by AI are carried out only after a user approves them.
Designed for privacy-aware data handling, minimisation and operational accountability.
Supports monitoring patterns that help teams detect issues and keep services observable.
Information on hosting, encryption at rest, backup arrangements and sub-processors is available on request for procurement and due-diligence reviews. Email info@nexaai.co.uk.
Bring your security questionnaire to a demo and we will walk through the controls that matter to you.