Security
Last updated: 17 August 2026
Security and auditability are the core of what Zoentia One does — and how we run this site. This page summarises the measures that protect data handled through one.nexusfinlabs.com. It describes the website; product security for the Zoentia One platform is covered under separate agreements.
1. Encryption
- All traffic is served over HTTPS/TLS; plain-HTTP requests are redirected.
- Form submissions are transmitted over encrypted connections to our email provider.
2. Hosting & infrastructure
- The Site is hosted on EU infrastructure (IONOS).
- Analytics are self-hosted (Umami) where possible to keep data under our control.
- Operating systems and dependencies are kept up to date with security patches.
3. Access control
- Administrative access is restricted to authorised personnel on a least-privilege basis.
- Server and dashboard access use strong authentication.
4. Data minimisation
- We collect only the data needed to respond to your enquiry (see the Privacy Policy).
- Optional analytics load only with your consent, and session tooling masks text you type.
5. Tamper-evident evidence
The Zoentia One platform records actions in an append-only, hash-chained ledger — no edit, no delete — so activity can be verified end to end. This “audit-ready by design” principle underpins the product; see Evidence & Auditability.
6. Responsible disclosure
If you believe you have found a security vulnerability affecting this site, please email hola@nexusfinlabs.com with details and steps to reproduce. Please do not publicly disclose the issue until we have had a reasonable opportunity to address it. We appreciate good-faith research and will respond promptly.
7. Sub-processors
A current list of sub-processors that may handle personal data is maintained in our Privacy Policy (section 5).