Product wording updated September 9, 2026. Existing service terms retained.
Nexum Systems is designed around tenant-isolated cloud execution, authenticated customer access, explicit approval boundaries, and clear operator control. This page summarizes the security principles behind Nexum workflows during the private beta.
Tenant isolation
Each customer workspace has its own authorization boundary for identities, memberships, conversations, tasks, memories, credentials, artifacts, schedules, and audit history. The customer applications communicate through an authenticated product API; they do not receive direct agent-runtime addresses, runtime keys, cloud credentials, provider tokens, or backup credentials.
Private agent runtime
Nexum's agent runtime is private infrastructure behind the control plane. Requests are dispatched through tenant-authorized workflows with idempotency, lifecycle controls, health monitoring, and audit metadata. Persistent data and backups are designed to use encrypted, access-controlled storage.
Human approval boundaries
Agents can classify, draft, summarize, research, monitor, and remind. They should not autonomously send client messages, make clinical decisions, place orders, execute transactions, or represent the user without explicit approval.
Connected accounts
When agents connect to email, calendar, messaging, research, or business tools, access is scoped to the workflow need and controlled by the authorized user or organization. Tokens and credentials are stored as protected tenant secrets and can be revoked or require reauthorization. Device-local capabilities remain behind the optional Nexum Companion boundary.
Apps, sessions, and devices
Web and mobile access is tied to authenticated tenant membership. Session rotation, logout, device revocation, replay defenses, and authorization checks are designed to prevent a removed or compromised device from continuing to access customer work.
Operational safeguards
- Use least-privilege, tenant-scoped access for connected tools.
- Keep audit-friendly records for scheduled work, approvals, and external actions.
- Separate draft generation from external submission.
- Use expiring, scoped access for private artifacts and attachments.
- Support suspension, credential revocation, data export, deletion, backup, and restore controls.
- Keep regulated and high-risk workflows behind separate release and review gates.
Report a concern
Security questions or vulnerability reports can be sent to aank2007@gmail.com.