Security and data
How Nexus keeps your workspace, your customers' details and your payments apart from everyone else's.
Separate workspaces
Every record belongs to one organisation. Each request is scoped to the workspace you are signed in to, so your contacts, deals and invoices stay in yours.
Roles and permissions
There are four built-in roles: Admin, Manager, Sales Rep and Read Only. Permissions are set per workspace, so you decide who can see and change what. A Sales Rep cannot export records, for example.
An audit trail
Changes are logged with who made them and when. Requests to the server are logged too, so a workspace can look back at what happened.
Secrets stay secret
Mailbox credentials and other third-party secrets are stored encrypted. The web app never receives them back: it only shows that one is set, and you leave the field blank to keep it.
Card payments go through Stripe
Customers pay on Stripe Checkout, so card numbers never touch Nexus. The money is paid into your own Stripe account, through Stripe Connect.
Signing in
Sign-in uses signed tokens that expire. An access token lasts one day and a refresh token lasts 28 days.
Limits on public pages
Pages and forms that anyone can reach are rate limited. That covers the contact form, forms embedded on your website, and the quote, invoice and payment link pages your customers open.
Customer links stay out of our logs
The private link you send a customer for a quote, invoice or payment is their only key to that page. We remove it from our server logs.
Your data is yours to take
Export your contacts and companies to CSV whenever you like.
Found a security issue?
Tell us. Talk to us and say it is a security report, and we will reply by email.
For how we handle personal data, see the privacy page.
Start with your next enquiry.
Free trial. No card needed. Cancel any time.