Trust Center
Keep control
of your operation.
Follow the data and actions in your agreed setup. Confirm the controls against your requirements.
Company context and access.
XecSuite’s public policy describes company-scoped access and permissions. Confirm which users and roles can see each connected source, and what happens when access is removed.
Ask for a walkthrough of the controls and evidence that apply to your deployment.
Hosting and model processing.
Canadian hosting is an available option. The location of stored data does not by itself establish where every model or service processes it.
Confirm the hosting region, subprocessors, model routing and data-processing terms for your requirements.
Training, retention and export.
The current public policy says tenant-private company memory does not train shared or external models by default. Opt-in model improvement uses anonymized and generalized patterns.
Review export, retention and deletion terms in the agreement. LODESTAR remains under evaluation for production use.
People approve the action.
Define who can review and approve outbound or irreversible actions. Include exception paths in acceptance testing.
Ask for current certification or service-level evidence where procurement requires it. This page does not assert an unverified certification.
Start with the work