Access control
Role-based permissions, approval workflows, and least-privilege access for agents, data, and connected systems.
Trust
Trust & Security
Caxion is built for governed AI work. This page summarizes how we approach security, compliance documentation, subprocessors, and ongoing updates.
Security is part of the product.
Governance, access control, validation, and auditability are not optional add-ons. They are designed into how Caxion discovers, builds, connects, and measures AI use cases.
Data protection
Encryption in transit and at rest, scoped integrations, and clear separation between customer content and platform operations.
Auditability
Records for configuration changes, approvals, evaluations, and production activity so enterprise actions remain explainable.
Lifecycle governance
Classify risk, validate before deployment, monitor performance, and retire agents with retained history.
Looking for legal terms? See the Privacy Policy, Cookie Policy, and Terms & Conditions.
Resources
Documentation and policies for security, privacy, and customer due diligence. Additional certifications and questionnaires can be shared under NDA where applicable.
Document
Security overview
High-level description of Caxion’s security posture, product controls, and operational practices.
Document
Data handling summary
How customer content, prompts, connection metadata, and logs are processed and retained.
Policy
Privacy Policy
How personal information is collected, used, and shared across the web app, native apps, and related Services.
Policy
Cookie Policy
How cookies and similar technologies are used on caxion.ai. The marketing site does not set optional tracking cookies.
Policy
Terms & Conditions
The contractual terms governing access to and use of the Caxion Services.
Subprocessors
Caxion uses carefully selected subprocessors to operate the Services. Categories and examples below describe current processing relationships and may be updated as the platform evolves. A more detailed current list is available on request at privacy@caxion.ai. See also the Privacy Policy.
| Subprocessor category | Purpose | Location |
|---|---|---|
| Infrastructure (Firebase / Google Cloud) | Application hosting, Cloud Functions, storage, identity, App Check, and related cloud infrastructure | United States |
| AI model providers (e.g. OpenAI, Anthropic, Google, xAI) | Processing of customer-initiated prompts, context, and related content to return model outputs; set of providers may change over time | Varies by provider |
| Email delivery (Resend) | Transactional email such as verification, resets, invites, and feedback acknowledgments | United States |
| Payments & entitlements (Apple / RevenueCat) | In-app purchase processing via Apple; subscription and entitlement status via RevenueCat | United States / Apple regions |
| Push notifications (APNs / FCM) | Delivery of push notifications to devices where enabled | Varies by platform |
FAQ
Common questions about security, data handling, and trust.
Where does Caxion process data?
Caxion processes data through its application infrastructure and approved subprocessors needed to operate the Services. Specific destinations can vary by feature and connected provider. See the Subprocessors tab and Privacy Policy for categories and examples.
Do you train public models on customer content?
Caxion does not use customer content to train generalized public models unless you provide explicit, separate permission for a defined purpose. Model providers process content to return outputs for your requests; their retention and training practices are governed by their terms and may change. See the Privacy Policy for details.
How are integrations authorized?
Connections require user or administrator consent. Access is limited to approved scopes, and credentials are stored with controls designed for enterprise use.
How do I report a security concern?
Email security@caxion.ai with details of the issue. Do not include sensitive production credentials in the initial report.
Where is Caxion available?
Caxion is available on the web at caxion.ai and as native apps for iPhone and iPad. Features may vary by device, plan, and region. This Trust Center provides security, privacy, and compliance materials for customers and prospects.
Updates
Material changes to trust documentation, subprocessors, and security communications will be recorded here.
-
September 9, 2026
Cookie Policy published
Added a Cookie Policy for caxion.ai. The marketing site does not set analytics or advertising cookies and does not show a consent banner because there are no optional cookies to consent to.
-
August 5, 2026
Privacy Policy and Terms refreshed
Updated Privacy Policy and Terms & Conditions for web, iPhone, and iPad Services—including AI providers, voice, attachments, memory and retention, billing, and organization sharing. Subprocessor categories aligned.
-
July 22, 2026
Trust Center published
Launched the public Trust & Security page covering overview controls, resources, subprocessors, FAQ, and update history.
-
July 22, 2026
Privacy Policy and Terms drafts posted
Published draft Privacy Policy and Terms & Conditions for app linking and customer review pending final counsel approval.