Access is purpose-limited
Google sign-in is used for account access. The Google Analytics connection requests the read-only Analytics scope so the app can retrieve reporting data.
TRUST & TRANSPARENCY
Know what happens to your data.
Trust comes from clear boundaries and honest answers. Here is how the current NexusIntel app handles account and marketing data, and where verification is still in progress.
Current product status
NexusIntel is under active development. The safeguards below are implemented in the codebase; production hosting, database configuration, and tenant isolation still require environment-specific verification.
Credentials stay server-side
Analytics OAuth tokens are encrypted with AES-256-GCM before they are stored. The encryption key and provider secrets are configured as server-only values.
Workspaces define access
Workspace data carries an organization identifier, and database policies restrict access by membership. The application checks a signed-in user and workspace role before protected actions.
You control the connection
Workspace owners or admins can disconnect the Analytics property. The disconnect flow removes its saved OAuth credentials.
WHAT THE APP USES
Only connect data you are allowed to share.
The app handles account identity, workspace details, and the marketing metrics you choose to connect or import. The dashboard demo is separate and uses embedded reference data; it does not read your workspace data.
For early use, provide aggregated marketing outcomes. Do not upload patient names, treatment details, or other sensitive personal information. The current product is not designed for health records or other sensitive personal data.
OPEN ITEMS
Security claims should match the evidence.
Source code includes row-level security policies and organization-scoped access checks. A code review alone cannot prove that production settings are correct. Cross-tenant allow/deny tests, live OAuth acceptance, deployment review, retention and deletion procedures, and backup/restore checks remain launch work.
NexusIntel does not claim a security certification or completed independent audit. This page describes the current implementation and known verification gaps; it is not a legal privacy policy or a promise of a particular service level.
MORE ABOUT NEXUSINTEL
Questions are part of trust.
Explore the product, read common answers, or review how connected data works.