Security Statement
Last updated: November 17, 2026
Security is a shared responsibility. Calculyx AI applies industry-standard controls to protect the platform. We do not — and cannot — guarantee that any online service is 100% secure.
Transport & storage
- HTTPS everywhere — all traffic to and from Calculyx AI is encrypted with TLS.
- Encrypted at rest — data stored by our managed database and hosting providers is encrypted using platform-provided mechanisms.
- Hashed credentials — passwords are hashed by the auth provider; we never store plaintext passwords.
Application controls
- Input validation — server-side validation with schema checks on every request.
- Rate limiting — protection against brute-force, scraping, and API abuse.
- Secure API handling — third-party API keys are held server-side and never exposed to the browser.
- Row-level security — database policies restrict each user to only their own data.
- Least-privilege access — production data access is limited to the app owner.
AI safety
- Input guardrails block prompt-injection patterns and off-topic requests.
- Output guardrails add hedging language and "not financial advice" reminders on regulated topics.
- The AI runs behind a server-side gateway; user browsers never call model providers directly.
Monitoring & logging
- Error and performance monitoring on both frontend and backend.
- Access and error logs are retained for a limited time to investigate incidents.
- Suspicious activity may trigger automatic throttling or account review.
Updates
We track our dependency graph and apply security updates on a regular cadence. Critical CVEs are patched as soon as reasonably possible.
Responsible disclosure
If you discover a security vulnerability, please report it privately to the address below rather than disclosing it publicly. We will acknowledge your report and work with you to resolve it in good faith. Please do not:
- Access data belonging to other users.
- Perform denial-of-service testing.
- Publicly disclose the issue before we've had a reasonable window to fix it.
Shared responsibility
You can help keep your account safe by:
- Using a strong, unique password.
- Signing out from devices you don't control.
- Never sharing OTPs, credentials, or API keys with anyone claiming to be Calculyx AI staff.
No online platform can be guaranteed 100% secure. Calculyx AI provides these controls on a reasonable-efforts basis and disclaims warranties as set out in the Terms & Conditions.
Contact for security matters
For questions about this page, write to balaji04@calculyxai.online.
Calculyx AI
Visakhapatnam, Andhra Pradesh, India