Security

Clear the security review before procurement asks. Certifications, controls and where to read the details.

5 variants 01Badge grid 02Split with list 03Dark feature grid 04Trust center cards 05Compact strip

01Badge gridCertification seals with a short line each

#v1
Security

Audited, certified, boring in the best way

  • AICPASOC 2Type II

    SOC 2 Type II

    Audited yearly by an independent firm.

  • ISO/IEC27001Certified

    ISO 27001

    Information security management.

  • EUGDPRReady

    GDPR

    EU data residency and a signed DPA.

  • USHIPAABAA

    HIPAA

    BAA available on Enterprise.

02Split with listControls on the left, certification card on the right

#v2

Your code stays yours

We built Nexus for teams whose code is the business. Every control is on by default, not an upsell.

  • Encrypted end to endTLS 1.3 in transit, AES-256 at rest, keys rotated every 90 days.
  • Zero training on your codeContractually guaranteed, for every plan including free.
  • SSO, SCIM and RBACOkta, Entra ID and Google, with roles down to the repo.

Independently verified

SOC 2, ISO 27001, GDPR and HIPAA Visit the trust center

03Dark feature gridSix controls on a dark panel

#v3

Enterprise controls, on every plan

Read the whitepaper

  • Encryption

    AES-256 at rest, TLS 1.3 in transit, customer-managed keys on Enterprise.

  • Single sign-on

    SAML and OIDC with any identity provider, plus SCIM provisioning.

  • Audit log

    Every agent action recorded and exportable to your SIEM.

  • Data residency

    Choose US, EU or APAC. Your data never leaves the region.

  • Self-hosted runners

    Run agents in your VPC so code never reaches our servers.

  • Pen tested

    Third-party tests twice a year and a public bug bounty.

04Trust center cardsDocuments a security team will ask for, with access status

#v4

Trust center

Everything your security review needs, in one place.

All systems operational

05Compact stripOne row of trust signals for pages that only need a nudge

#v5

Enterprise-grade security

  • SOC 2 Type II
  • ISO 27001
  • GDPR
  • HIPAA
  • SSO
Learn more