Security

Security

For the person in IT who has to approve this. Questions: security@nexpertai.com

Your email system
purchasing@Nexpertorders@Nexpertaccounting@hr@j.smith@owner@
Nexpert opens only the shared mailboxes you pick. The limit is set in your email system, not just in our code.

Permissions on Microsoft 365

Mail.ReadWrite

Requested

Read mail and save draft replies. Limited to the mailboxes you pick with Exchange Online RBAC for Applications.

Mail.Send

Not requested

Nexpert never sends email. Your team sends the drafts.

Google Workspace is next, with the same rules: shared mailboxes only, no sending.

AI reads each message to find the order and what changed. Whether it matches is decided by fixed rules.

Data

Stored in Canada

AWS Canada (Central), ca-central-1.

Database off the internet

Only our application servers can reach it.

No stored database password

The app uses short-lived AWS credentials.

Audit log

Every sign-in and every change, kept read-only.

Need the list of services that process your data? Email us.

Found a security issue?

Email us and we'll keep you updated until it's fixed.

security@nexpertai.com