Security

Security & privacy

Your data security is our top priority. Hebbrix is built with enterprise-grade security from the ground up.

what we do

How we protect your data

Encryption everywhere

All data is encrypted in transit with TLS and at rest with AES-256. Passwords are hashed with bcrypt and never stored in plain text.

Audit evidence

This site does not provide a SOC 2 attestation or an independently verified audit timeline. Request current evidence before making a procurement decision; security features are not certification.

Privacy controls

Use the authenticated account-data export API and documented deletion workflow. Usage-statistics export is separate; account access stops immediately on deletion, with a 90-day restoration window before permanent purge. See Docs → Privacy & Data for scope and backup limitations.

Regulated data and contracts

Do not submit protected health information or other regulated data without confirming suitability and separately signed terms. A DPA, BAA, residency commitment or SLA is not provided by a marketing page. Contact us to establish availability and scope.

Data location and processing

Primary hosted service data is stored and processed in AWS US East. Customer-selectable residency is not currently offered. Model-backed extraction and chat send relevant input to the configured model provider. The current hosted extraction configuration uses OpenAI, and OpenAI-backed chat sends conversation content and selected memory context to OpenAI. Other model selections may use other providers. This is not a complete subprocessor register; request the current list and applicable retention and processing terms before submitting sensitive data.

Account deletion disables access immediately with a 90-day restoration window before permanent purge. Backups and operational retention are distinct from immediate removal from active retrieval. See the Privacy Policy and export and deletion documentation.

Found something? Tell us.

We take every report seriously. If you have found a vulnerability or have a security question, reach out and we will respond quickly.

For security inquiries, contact contact@hebbrix.com