Skip to main content
RelixQ
Menu
Request demo
Trust CenterDocuments
Reliability & status
Trust Center
Controlled accessControlled access

Trust Center

Request procurement and security-review material.

Public summaries stay open. Detailed questionnaires, architecture material, contractual documents, and available assessment evidence are shared only when appropriate and approved.

Access
Controlled request
Scope
Security questionnaires, architecture review, DPA and retention discussion, subprocessor detail, independent-assessment material, and procurement evidence.
Last reviewed
Aug 17, 2026
Evidence owner
Trust operations owner
Approval role
Evidence owner and legal reviewer
Evidence posture
Gated evidence

Evidence posture

Gated evidence

Gated artifacts

Availability and disclosure scope are confirmed per requester and document.

Evidence artifacts

  • Security questionnaire
  • Architecture review material
  • DPA and retention material
  • Available independent-assessment evidence

Framework relationships

Alignment is not the same as certification.

AICPA Trust Services Criteria / SOC 2

Assurance roadmap

Control mapping and examination roadmap only. RelixQ does not claim a completed SOC 2 examination.

ISO/IEC 27001

Assurance roadmap

Information-security management roadmap only. RelixQ does not claim ISO/IEC 27001 certification.

Customer security and resilience programs

Customer evidence support

RelixQ artifacts can support an assessment; they do not certify the customer or provide a legal opinion.

Claim register

Public wording tied to evidence and review state.

Each statement carries its own scope, evidence posture, framework relationship, and review date. Roadmap language remains visibly separate from achieved controls.

Published claim

Public summaries remain open

Security, data, AI, reliability, compliance, subprocessor, scanning, and disclosure summaries remain accessible without a document request.

Documented practice
Scope
Public Trust Center pages and legal-policy index.
Last reviewed
Evidence owner
Trust operations owner
Approval role
Evidence owner and legal reviewer

Evidence

Public summary

The public Trust Center is the evidence artifact.

Review evidence artifacts
  • Public Trust Center pages

Framework context

No framework relationship is asserted for this claim.

Published claim

Detailed material is gated

Completed questionnaires, detailed architecture, contractual material, and independent reports are shared only when available, appropriate, and approved for the requester.

Documented practice
Scope
Sensitive procurement and assurance material.
Last reviewed
Evidence owner
Trust operations owner
Approval role
Evidence owner and legal reviewer

Evidence

Gated evidence

Each document retains an owner, status, scope, review date, and access decision.

Review evidence artifacts
  • Controlled document inventory
  • Request and approval record

Framework context

  • AICPA Trust Services Criteria / SOC 2

    Assurance roadmap — Control mapping and examination roadmap only. RelixQ does not claim a completed SOC 2 examination.

  • ISO/IEC 27001

    Assurance roadmap — Information-security management roadmap only. RelixQ does not claim ISO/IEC 27001 certification.

Published claim

Availability is confirmed case by case

A request does not imply that a report, certification, completed questionnaire, or contractual term exists. RelixQ confirms availability, current status, disclosure scope, and any required agreement before delivery.

Under review
Scope
All Trust Center document requests.
Last reviewed
Evidence owner
Trust operations owner
Approval role
Evidence owner and legal reviewer

Evidence

Operational evidence

Request status and disclosure decisions are recorded.

Review evidence artifacts
  • Document request
  • Approval decision
  • Disclosure record

Framework context

  • Customer security and resilience programs

    Customer evidence support — RelixQ artifacts can support an assessment; they do not certify the customer or provide a legal opinion.

Published claim

Sensitive operational material is not public

Raw penetration-test findings, secrets, detailed network topology, incident runbooks, exploit instructions, customer data, and internal remediation records are not public website assets.

Documented practice
Scope
Highly sensitive internal and customer-confidential material.
Last reviewed
Evidence owner
Trust operations owner
Approval role
Evidence owner and legal reviewer

Evidence

Public summary

The public exclusion boundary is explicit.

Review evidence artifacts
  • Public disclosure boundary

Framework context

  • NIST Cybersecurity Framework 2.0

    Vendor control mapping — Control-language mapping for buyer review; not a certification.

  • ISO/IEC 27001

    Assurance roadmap — Information-security management roadmap only. RelixQ does not claim ISO/IEC 27001 certification.

Gated request catalog

Choose the review material your team needs.

This is a catalog of request types, not a public document room. No sensitive artifact is stored behind a guessable website URL, and preparing a request does not grant access or promise that an artifact is available.

Security questionnaire response

Prepared per review

A scoped response for qualified customer security and procurement evaluations, including the control owner and evidence boundary where applicable.

The response is prepared for the requester and may require clarification of the questionnaire, product scope, and review deadline.

Read the security overview

Data Processing Addendum review

Contract review

A review track for data-processing terms, customer roles, approved service scope, and applicable transfer or privacy requirements.

A request starts commercial and legal review. A public draft or request acknowledgement is not an executed agreement.

Read the public DPA summary

Architecture and data-flow review

Guided review

An approved discussion of the managed SaaS architecture, tenant boundaries, service flows, and security responsibilities.

Sensitive topology, secrets, exploit detail, customer information, and internal runbooks are never distributed from the public website.

Read the data-handling overview

Subprocessor and service-provider detail

Public summary + review

Current public service-provider information plus clarification for the products, regions, and customer-enabled integrations in scope.

The public Trust Center currently provides a service-provider summary. RelixQ confirms the approved register and applicable contractual scope during review.

View the service-provider summary

Retention and deletion review

Policy review

A scoped review of relevant data classes, deletion paths, backup expiry, contractual requirements, and legal-preservation exceptions.

The approved policy and customer agreement control. The request process does not create a new retention commitment.

Read the retention summary

Independent assessment material

Conditional availability

Applicable independent testing, audit, or assessment material whose scope and reporting period have been verified for disclosure.

Availability varies by artifact and period. Disclosure may require a qualified evaluation, confidentiality terms, redaction, or a guided review.

Review the assurance roadmap
How access works: RelixQ verifies the requester, review purpose, customer or evaluation scope, artifact currency, and any confidentiality requirements. Approved material is delivered through an agreed channel or reviewed live; it is not published as a public website asset.

Access review

Prepare a trust-material request

The public site does not persist this form. Submitting opens an email draft in your email application; RelixQ receives the request only after you review and send that email. Do not include credentials, customer data, source code, findings, or other confidential information.

Email security directly

Requests are reviewed case by case. By continuing, you agree to the Privacy Policy.

Publication boundary

Status applies only to the scope and evidence shown above.

This public page describes the controlled-access process. It does not assert that every requested artifact exists or can be disclosed. The catalog entry was last reviewed on .