Your business runs on this data.
We protect it accordingly.
Your books, your payroll, your tenants' personal information, Nexus SoftSphere is engineered so that security is a property of the platform, not a setting you have to remember to turn on.
Encryption everywhere
All traffic is encrypted with TLS 1.2+ in transit; data is encrypted at rest with AES-256. Encryption keys are managed and rotated under strict access controls.
Access on a need-to-know basis
Role-based permissions down to field level, enforced two-factor authentication options, session controls, and single sign-on for enterprise plans.
Audit trails on everything
Every posting, edit, approval and login is recorded, who, what, when, from where. Auditors get evidence, not arguments.
Backups you can rely on
Automated, encrypted backups replicated across regions with defined recovery-point and recovery-time objectives, and restores that are actually tested.
Data protection by design
Data handling aligned with modern data protection law, including the CCPA/CPRA and the GDPR, with lawful basis tracking, data subject request workflows, retention rules and breach notification procedures.
24/7 monitoring
Continuous infrastructure and application monitoring with alerting, DDoS protection at the edge, and an incident response process with defined severity levels.
Security is a practice, not a page
Beyond the technology, our engineering culture treats your data as a liability we hold in trust, with the discipline to match.
-
Least-privilege internallyNexus SoftSphere staff access to customer data is role-gated, logged, and reviewed, support access requires your ticket.
-
Secure development lifecycleCode review, dependency scanning and pre-release security testing on every change that ships.
-
Tenant isolationYour workspace's data is logically isolated from every other customer's, enforced at the platform layer.
-
Data portabilityFull export of your data at any time. Leaving should never require our permission, and it doesn't.
Have a security questionnaire? Send it over.
Our team answers vendor assessments, privacy due-diligence requests and technical deep-dive questions as part of every enterprise engagement.