We hold ourselves to the controls we recommend.
You're trusting us with access to systems and data that matter. Here is exactly how Ofnex handles that trust — written so your security, legal, or procurement team can review it before we start.
How we handle your access and data.
NDA before discovery
A mutual NDA is signed before any operational or client data is discussed — not after the first call, before it matters.
We work in your environment
Automations and agents are deployed into your own GCP environment — never a shared platform. Code lives in your repositories, and you own the code, the data, and the keys.
Least-privilege, time-bound access
Named accounts issued through your identity provider, MFA enforced, scoped to the current phase and revoked at handover. No shared credentials.
Data stays inside your perimeter
We don't copy production data to our own systems, feed it to analytics tools, or store anything outside the perimeter agreed in your statement of work.
Responsible AI use
Client confidential data never goes into consumer AI tools. AI used in delivery runs on enterprise platforms under your control, with training on your data disabled. We don't use client data to train models.
Built for your security review
Architecture, data flows, and controls are documented as we build, so your security and audit teams can review them before anything goes live.
Cleared, hardened, accountable
GoC Level II Security Clearance, valid to 2033. Client work is done only on encrypted, managed, patched company devices with endpoint protection.
Incident notification
If we become aware of a security incident affecting your data, we notify you without undue delay, within the timeframe set in your contract.
Documents available on request.
Email info@ofnexconsulting.ai and we'll respond within two business days.
- Mutual NDA
- Certification details: CISSP, CISA, CISM, CRISC, CDPSE, CHFI, CEH, CCIE (Data Center and Collaboration), Google Cloud
- Confirmation of GoC Level II Security Clearance
Related: Privacy Policy · Accessibility
Have a security review or questionnaire for us?
Send it over. We'll walk your security, legal, or procurement team through how we work — before any access is granted or any data is shared.