GDPR Compliance
We are fully committed to compliance with the General Data Protection Regulation (GDPR) for our European customers and their users.
Our Commitment to Privacy
NexusAI was built with data privacy as a foundational principle. We act as both a Data Controller (for our direct customers' billing/account info) and a Data Processor (for the data processed by deployed AI agents). We are fully compliant with GDPR requirements in both capacities.
Data Processing Agreement (DPA)
We offer a standard Data Processing Agreement that incorporates the latest Standard Contractual Clauses (SCCs) for international data transfers. Enterprise customers can sign this DPA directly through their dashboard settings.
Your Data Rights
Under the GDPR, individuals have specific rights regarding their personal data. We provide tools directly in the NexusAI dashboard to fulfill these rights:
- Right to Erasure (Right to be Forgotten): You can delete your account and all associated workspace data with a single click. Hard deletion is processed within 30 days.
- Right to Portability: Export your invoices, agent configurations, and audit logs in machine-readable JSON/CSV formats at any time.
- Right to Access: View all data we hold about your account via the Account Settings panel.
Subprocessors
We use a limited number of vetted subprocessors to provide our service (e.g., AWS, Stripe). A full, up-to-to-date list of subprocessors is available upon request and provided in our DPA.