Security

What actually happens to your customers' data inside Fixorix

Personal data never reaches the model

Before every AI request, emails, phone numbers, card numbers, passports, SNILS and IBANs are stripped from the text — the model sees ***

Protection against instruction hijacking

Customer text is checked for attempts to reprogram the model, and secrets or system instructions are stripped from its replies

A human makes the call

Every AI step has a confidence threshold and its own escalation branch: when the model is unsure, the conversation goes to an operator

Permissions on three axes

A member role is set separately for the project, support and tickets. Access to requests is further scoped by group

Scoped API keys

An API key is issued for a specific set of operations, and the widget supports HMAC signing for server-side customer identification

Encryption and backups

Data is encrypted in transit and at rest, hosted on protected infrastructure with regular backups