Nex Systems

Trust, built into how we work.

How Nex Systems protects the information entrusted to Nex 360, and the commitments we make on data protection, security, quality and compliance.

Request security information Read our privacy notice

Our commitments at a glance

Data protection

GDPR principles, applied in practice.

We design how we handle personal data around the GDPR and the data protection laws that apply where we and our customers operate.

Purpose and minimisation
We collect what a task needs and use it only for that purpose.
Retention you control
In Nex eKYC, verification records follow the retention period your organisation sets, from one to ten years.
Rights requests
We help customers respond to access, correction and deletion requests from the people whose data they hold.
International transfers
Where personal data moves between countries, we use appropriate safeguards and agreements.

Controller or processor? It depends on the data.

Nex as processor

Data in Nex 360

When you use Nex eKYC, Nex Screening or Nex AML, you decide why and how your customers' data is processed. We process it on your documented instructions under a data processing agreement.

  • Processing only on your instructions
  • Confidentiality for authorised personnel
  • Help with rights requests and impact assessments
  • Notice of personal data breaches without undue delay

Nex as controller

Our website and business contacts

For website visits, enquiries and our own business relationships, we decide how information is used, as explained in our privacy notice.

Read the privacy notice

Information security

Security in every layer.

Encryption
Data is encrypted in transit, and sensitive verification fields are encrypted with keys we rotate.
Access control
Role-based permissions in each product, with access to production limited to the people who need it.
Audit history
Each product records who did what, with integrity checks on the history.
Secure development
Code review and automated checks gate every release.
Region choice
Nex AML lets each organisation choose where its AI processing runs.
Reporting a concern
Report a suspected vulnerability to admin@nex.systems or through our contact page, choosing Security concern.

Quality management

Quality you can follow.

  1. Plan

    Changes start from a written requirement.

  2. Build and review

    Every change is reviewed before it is merged.

  3. Test

    Automated checks cover types, rules and behaviour.

  4. Release and learn

    Releases are controlled, and incidents are reviewed for their causes.

Compliance commitments

  • Financial crime

    We screen our own business relationships and do not support illicit activity.

  • Modern slavery

    We work to keep forced labour out of our business and supply chain.

    Read the statement

  • Responsible AI

    AI assists; people decide.

    Responsible AI

  • Speaking up

    Concerns can be raised confidentially, without retaliation.

Documents and requests

Security and data protection questions

We have not published formal certifications such as ISO/IEC 27001. This page describes the controls we apply, and we are happy to answer your security questionnaire or discuss your review requirements.

Need more detail for your review?

Request security information Contact us