Security & Governance
Security architecture
Tenant isolation, role-scoped access, immutable audit ledger, human approval gates, and Doctrine I — the six pillars your security review will inspect.
Open Security & Governance →Trust Center
One artifact for security, procurement, and legal.
NuX Holdings™ is enterprise infrastructure, not a dashboard. This is the single page your security architects, procurement reviewers, and outside counsel can read end-to-end before signing.
Tenant isolation
Row-Level Security at the database boundary.
Human approval
No model output reaches an executive surface without a human.
Doctrine I
No automated adverse decisions. By design.
Measurement
Methodology
How NuX v0.1 scoring works, what each confidence tier (Measured / Illustrative) means, and where human judgment enters.
Open Methodology →Doctrine
Doctrine I — no automated adverse decisions
The founding constraint of the platform. Adverse-action paths require a named human decisionmaker and are recorded in the audit ledger.
Review Doctrine I →Privacy
Privacy Policy
What we collect, why, how long it is retained, and how tenants can request export or deletion under the DPA.
Open Privacy Policy →Contracts
Master Terms & DPA
The operating contract for NuX Holdings™ engagements: tenant scope, data handling, retention, and outcome obligations.
Open Terms →Engagements
Refund & cancellation
30-day money-back on self-serve tiers. Audit and Annual Platform engagements follow the Master Services Agreement.
Open Refund Policy →Reviewer Checklist
What your procurement review will find
- ✓ Tenant isolation enforced at the database, not the application
- ✓ Privileged actions logged with actor, target, and metadata
- ✓ Role checks performed server-side via security-definer functions
- ✓ No client-trusted admin state; no role storage on profiles
- ✓ Human approval on every adverse or executive-surfaced output
- ✓ Confidence framework on every score (Measured / Illustrative)
- ✓ Data minimization defended contractually (DPA) and structurally (schema)
- ✓ Doctrine I — no automated adverse decisions, enforced by design
Security questionnaires & DPAs
Send to the NuX Holdings team for review.
We complete enterprise security questionnaires (SIG, CAIQ, custom) and provide our DPA on request. Typical turnaround is 5 business days.