Trust center

Review the controls before the claims.

See how NexioraAI separates schools, limits access, keeps teachers in control, and records important operational decisions.

Control evidence Ready to inspect
TEN-01

Tenant resolution

Evidence · Architecture walkthrough

IAM-02

Invited membership

Evidence · Access review

HUM-03

Approval gates

Evidence · Workflow demonstration

FIL-04

Scoped files and workers

Evidence · Data-flow review

Product · Deployment · AgreementOwnership stays explicit

Control inventory

Six boundaries you can inspect.

TEN-01

Data boundary

Tenant resolution

A control-plane directory resolves each school before records are read from its tenant database.

Architecture walkthrough

IAM-02

Identity

Invited membership

Verified identity is mapped to a school invitation, role, class assignment, and explicit permission.

Access review

HUM-03

Decision

Approval gates

Marks, feedback, parent drafts, and student-visible results pause inside the responsible human workflow.

Workflow demonstration

FIL-04

Processing

Scoped files and workers

Signed file access, configured storage, OCR, and grading workers operate against the assessment task.

Data-flow review

OPS-05

Operations

Audit and health

Setup, access, handover, jobs, exports, deletion, health, and metrics produce operational evidence.

Control inventory

DAT-06

Lifecycle

Export and deletion

Authorized administrators can request tenant exports and confirmed academic-data deletion with audit history.

Admin walkthrough

Know who owns each answer.

Product behavior, infrastructure settings, and contract terms each have a different owner.

Product baseline

Tenant resolution, invitation checks, role-aware routing, publishing gates, audit events, signed file access, export, deletion confirmation, health, and metrics.

Deployment configuration

Cloud region, database and storage hosting, retention, identity client, email delivery, observability, approved origins, AI provider, and model settings.

Executed agreement

Legal entity, processing purpose, data categories, subprocessor schedule, incident window, transfer mechanism, deletion schedule, liability, and governing law.

Start a conversation

Bring your security and privacy questions.

We will separate what the product enforces, what deployment must configure, and what the agreement must record.

Request a trust review