Rex policy evolution

model training

Latest stance: no training claim

“Rex maintains a documented information security programme and externally communicates its key commitments through this Privacy Policy, our Terms of Service , our Data Processing Agreement , our AI Security overview , and our publicly accessible Trust Center . Our key technical and organisational measures include: Encryption of personal data in transit (TLS 1.2 or higher) and at rest (AES-256), including database backups. Role-based access controls, multi-factor authentication, least-privilege provisioning, and regular access reviews. Infrastructure hosted on AWS with VPC isolation, network access controls, and continuous monitoring. Tenant isolation so personal data is logically segregated between customers and is not used to train or fine-tune any AI models. Documented incident detection, response, and breach notification procedures, with notification to affected customers without undue delay. Personnel controls including background checks, signed confidentiality agreements, and recurring security awareness training. Continuous improvement through vulnerability scanning, dependency monitoring, and independent assessments. Rex is pursuing SOC 2 Type II certification. A current list of subprocessors, certifications, and our overall security posture is maintained at our Trust Center linked above. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.”