Security and data protection
Decisions touch money, customers and compliance. Here is how Condexa keeps them safe, controlled and provable.
How we protect you
Built so the right people change the right rules, and every answer can be proven
Secure sign-in
People sign in through a secure identity provider. Condexa is invitation only: an administrator adds each person and decides which workspaces they can see.
Least privilege by default
Every workspace has members with roles. Who can view, build, publish or manage a decision is set per workspace, and screens hide what a person is not allowed to do.
Secrets never come back
Connection passwords and client secrets are encrypted when saved and never returned to the browser again. A connection is referred to by name, not by its credentials.
Named applications, their own keys
Each system that calls Condexa is registered as an application with its own API key, and can only call the workflows opened to it. Keys can be revoked at any time.
A record of every decision
Every call is recorded with its inputs, answer, the version that answered and the trace, so you can show exactly how a decision was reached.
Separate environments
Connections can point at different systems for test and live, so building and testing a decision never touches production data by accident.
FAQ
Security questions
Where is our data hosted?
Talk to us about hosting. Condexa is built on Microsoft .NET and SQL Server and can run in the region your data protection policy needs, including the UK.
Does Condexa store our customer data?
Condexa stores the inputs and answers of recorded runs, so decisions can be explained later. Callers can ask for a run not to be recorded where policy allows, and lookup tables can read live from your own systems instead of copying data.
Can we control who changes a rule?
Yes. Roles decide who can build, who can publish and who can only view, per workspace. Every published version is kept, so you can always see what changed.
How does Condexa support UK GDPR?
Condexa helps you show how automated decisions are made: each decision is written down in a readable workflow and every run keeps its trace. We are happy to share our data processing terms and answer your security questionnaire.
Have a security questionnaire? Send it over.
We will answer it, and show you the controls live in a demo on one of your own decisions.
No slides. Your decision, built live. No obligation.