Trust

Security & trust

MeghaX is built for operators who put real company data — people, deals, contracts, and cash — into one system. This page summarizes how we approach security and trust today. It is not a compliance certificate and does not replace a formal security review for your organization.

Last updated: 2026-07-26

Current practices

Access control

Workspace data is gated by company tenancy and role-based permissions. Admins control who can see and change CRM, HR, contracts, time, invoicing, hiring, and custom modules.

Authentication

Users authenticate with secure credentials. Multi-factor authentication (MFA) is supported. Google and Microsoft sign-in are available through MeghaX platform OAuth for supported login flows.

Encryption in transit

Customer traffic to MeghaX is protected with TLS (HTTPS). Production hosting uses Let’s Encrypt certificates behind Nginx.

Infrastructure

The MeghaX application and related services are hosted on AWS infrastructure (including EC2 for the marketing site stack and AWS services used by the product platform). Access to production systems is limited to authorized operators.

AI safeguards

MeghaX AI features — including module AI and MIRA Copilot — are assistive. They help analyze and summarize operating data; they do not autonomously make employment, legal, or financial decisions. Humans remain accountable for outcomes.

Your data, your control

Account Owners control Customer Data inside their workspace. Per our Terms and Privacy Policy, data can be exported, and accounts follow defined retention and deletion windows after termination.

What we do not claim here

We do not list SOC 2, ISO, or other third-party audit badges on this page unless those reports are complete and available under NDA. If your procurement process needs a questionnaire, pen-test summary, or roadmap for formal attestations, contact us — we will answer honestly about what exists today versus what is planned.

Incident notification

If a data breach affects Personal Information, REDYX notifies affected Account Owners and, where required, individuals and regulators, without unreasonable delay — as described in our Privacy Policy.

Full product documentation — including access and workflow guides — lives in Docu Center, and MIRA Copilot can guide setup inside the app after you create a workspace.