Legal
Data Security
Our data and privacy practices
How we protect your data
As a security company, we do not want to become your next attack vector. Here are some guidelines we follow.
🔒 Xeol only has access to metadata on the software used in your builds and no PII, PHI, or PCI.
🔒 Xeol is open source so you can audit as you see fit.
🔒 Xeol encrypts all data at rest with AWS RDS encryption using industry-standard AES-256 algorithm.
🔒 Xeol only sends data over TLS 1.2 or greater.
🔒 Xeol will remove all your company data within 3 months of end of service. This can be expedited if you message us at privacy@xeol.io
Concerns?
If you still have any concerns on the data that we are holding on your behalf, please message us at privacy@xeol.io