Legal
Security
A short overview of Oxyra One's approach to security and how to report a vulnerability. For the full architecture, see Security & Trust.
Security is treated as a foundational, cross-cutting requirement of the Oxyra One platform rather than a bolt-on feature. Identity, tenant isolation, role-based access control, encryption and audit logging are intended to apply consistently across every one of the 71 domains and every AI-driven action, with high-risk actions requiring human approval before they execute.
This page covers responsible disclosure. Oxyra One's full security architecture and governance model is described on the Security & Trust page, linked below.
Responsible Disclosure
If you believe you've found a security vulnerability affecting Oxyra One's public website or product, we ask that you report it to us before disclosing it publicly, so we have an opportunity to investigate and address it.
Please report suspected vulnerabilities to security@oxyraone.com (placeholder contact, pending confirmation) with enough detail to reproduce the issue. Reports sent to this address are reviewed by the security team. Please avoid accessing, modifying or destroying data that isn't your own while investigating or reporting an issue.
Full security architecture
Tenant isolation, RBAC, encryption, audit trails, AI governance and how security applies across every Oxyra One domain are covered in full on Security & Trust.
See Oxyra One on your own enterprise context.
Talk to us about the capabilities relevant to your organization, or start setting up your workspace.