Security Overview

Nexora Service S.R.L. operates under full GDPR compliance as an Italian-registered entity, with all data handling practices aligned with EU data protection standards. Our security architecture includes: - Data isolation: client data is processed in dedicated project environments with role-based access control and full audit logging. - Encrypted infrastructure: all data at rest is encrypted (AES-256), and all data in transit uses TLS 1.3. Our backend runs on dedicated European VPS (Hetzner, Germany) with daily encrypted backups. - Annotator access control: annotators work through secured VPN-controlled environments with no local data storage permitted. All workstations are monitored and logged. - NDA and confidentiality: every team member, including contractors in Dhaka, signs a binding NDA before project onboarding. - Client-controlled workflows: we integrate directly with client annotation platforms (Label Studio, CVAT, Labelbox, SuperAnnotate), meaning sensitive client data never leaves the client's controlled environment. - Incident response: documented incident response protocol with breach notification within 72 hours as required by GDPR Article 33. - ISO 27001 certification currently in implementation phase, expected completion Q4 2026. - For healthcare and legal projects, additional data minimization and pseudonymization protocols apply, compliant with Italian sector-specific regulations. Our proprietary NORA knowledge-graph layer adds a further security advantage: annotation patterns are abstracted into graph relations without retaining raw identifying information beyond the project lifecycle.

Security Credentials