Frequently Asked Questions
11 answers about how Vexera handles your data, protects your source code, and meets compliance requirements.
Data & Privacy
No. Your code is never used for training, fine-tuning, or improving any model. Every AI provider we work with is contractually prohibited from doing so, and we enforce zero data retention wherever the provider supports it.
All customer data at rest is stored in the European Union, with primary infrastructure in Frankfurt. We never replicate or transfer your data outside the EU for storage.
Uploaded source code is deleted as soon as a scan completes. Scan reports remain available for the lifetime of your subscription. When you close your account, all associated data is permanently purged.
Only with the vendors listed on our subprocessors page, and only to the extent required to run your scans. We never sell, license, or otherwise disclose customer data to third parties.
Yes. Under GDPR you can request access to, correction of, or deletion of your personal data at any time. Email privacy@vexera.ai and we will complete the request within 30 days.
Security
With Zero Data Retention, an AI provider processes a request and immediately discards both the prompt and the output · nothing is stored, logged, or reused. We enforce ZDR with every provider that offers it and are actively pursuing it with the rest.
Each scan runs in an isolated environment that is destroyed the moment the scan completes. Your code is never co-located with another customer's data, and the environment has no access to the rest of our platform.
Yes. Data is encrypted in transit with TLS and at rest with AES-256, across every layer of the platform.
Compliance
Yes. Vexera is a Danish company subject to EU law. We maintain a Data Processing Agreement, documented data subject request procedures, and a full record of processing activities.
Yes. Our standard DPA covers GDPR Article 28 requirements and is ready for signature · contact legal@vexera.ai and we can typically have it signed the same day.
The subprocessors page lists every third-party vendor along with its purpose, data region, and certifications. We notify customers before adding or replacing any vendor.
Need something else?
Reach out to our security team, we respond within one business day.