TRUST CENTRE
Trust is engineered, not promised.
How we protect your data, govern our AI and prove it, in plain words. Including what we haven’t finished yet.
OUR COMMITMENTS
Six promises, in writing.
- 01
Your data stays yours
We never sell, share or reuse it beyond the work you hired us for.
- 02
Your data never trains shared models
Not ours, not anyone else’s.
- 03
Least access, always
People and systems get only the access their work needs, for only as long as it needs it.
- 04
Encrypted everywhere
In transit and at rest, with keys managed and rotated.
- 05
Every action leaves a trail
Who did what, when and why is logged and retained.
- 06
You hear it from us first
If something affects your data, we tell you promptly and tell you plainly.
Signed on behalf of Apporine leadership
ASSURANCE
Where we are, honestly.
Security policy framework
In progress
Cyber Essentials (UK)
Planned
CSA STAR Level 1
Planned
Independent penetration test
Planned
ISO/IEC 27001
Planned
SOC 2 Type II
Planned
We update this line the day each milestone changes. Ask us for the current evidence at any time.
DATA
What we hold, where, and for how long.
| Data | Where it lives | Who can access it | How long we keep it |
|---|---|---|---|
| Enquiries you send us | Our email delivery and business email providers | Apporine’s founders | Up to 24 months, or until you ask us to delete it |
| Relyxus operational data | Your own environment | Your team; ours only with your permission | Your policy |
| Veryion account data | Our hosted platform (region confirmed in your contract) | Your team and named support staff | Your contract term plus the legal minimum |
| Website analytics | None in use today | Not applicable | Not applicable |
Enquiries you send us
- Where it lives
- Our email delivery and business email providers
- Who can access it
- Apporine’s founders
- How long we keep it
- Up to 24 months, or until you ask us to delete it
Relyxus operational data
- Where it lives
- Your own environment
- Who can access it
- Your team; ours only with your permission
- How long we keep it
- Your policy
Veryion account data
- Where it lives
- Our hosted platform (region confirmed in your contract)
- Who can access it
- Your team and named support staff
- How long we keep it
- Your contract term plus the legal minimum
Website analytics
- Where it lives
- None in use today
- Who can access it
- Not applicable
- How long we keep it
- Not applicable
AI GOVERNANCE
AI you can see through.
PRODUCTS
Security built into both products.
Relyxus
- Self hosted in your environment
- Quorum approvals with MFA reconfirmation
- Rollback verified before any change
- Full audit of AI reasoning and actions
Veryion
- Signed licence keys
- Named approvers for every change
- Full audit log
- Role based access and single sign on
DISCLOSURE
Found a vulnerability? Tell us first.
01
Email contact@apporine.com with the subject ‘Security’. Include what you found, how to reproduce it and how to reach you.
contact@apporine.com02 · OUR PROMISE
We acknowledge every report within two working days, keep you updated until it’s fixed, and will not pursue good faith research that respects our users’ data.
LET’S TALK
Ask us the hard questions.
Send your security questionnaire, request an NDA, or speak with the engineers who built it.
Prefer email? contact@apporine.com