Legal & Governance
Version v3.5
● Effective: January 1, 2026
Security Practices & Vulnerability Disclosure
Last Reviewed & Updated: July 26, 2026
Detailed breakdown of Nexura's zero-trust cloud security architecture, AES-256 data vault encryption, SOC2 controls, and responsible vulnerability disclosure policy.
### 1. Zero-Trust Cloud Architecture
All API endpoints use OAuth2 JWT authentication and granular rate limiting to prevent unauthorized database access.
### 2. Responsible Vulnerability Disclosure
Security researchers can submit vulnerability reports to security@nexura.ltd. We respond within 12 hours and resolve valid security findings promptly.
All API endpoints use OAuth2 JWT authentication and granular rate limiting to prevent unauthorized database access.
### 2. Responsible Vulnerability Disclosure
Security researchers can submit vulnerability reports to security@nexura.ltd. We respond within 12 hours and resolve valid security findings promptly.
Have Questions About This Policy?
Our legal and compliance team is available for custom vendor questionnaires and DPA reviews.
Email Legal Team →