Security
NoxAds.ai security approach.
This page summarizes how we approach security across access management, operational review, and data/incident handling.
Access control
NoxAds approaches access with the least-privilege principle. Project access is limited to the systems, accounts, files, and permissions needed for the agreed work, and is removed or reduced when it is no longer needed.
For client-owned platforms, account ownership, internal permissions, billing access, and administrative recovery remain the client's responsibility. NoxAds can work within delegated roles to the extent the platform supports them.
Operational review
Campaign changes, messaging workflows, AI outputs, and production assets can affect spend, reputation, and customer experience. Security therefore covers not only technical controls but also operational review.
High-impact actions should have a clear owner, documented context, review state, and an approval path before launch. This approach reduces accidental changes, unclear responsibility, and unreviewed automation.
Data and incident handling
Project data should be shared through appropriate channels and limited to what is needed for the workflow. Sensitive customer data, credentials, financial exports, or private business documents should be scoped down before transfer and avoided when not required.
If a security concern arises, NoxAds prioritizes containment, impact assessment, communication with affected stakeholders, and follow-up actions. You can send reports to info@noxads.ai with enough detail for us to assess or reproduce the issue.
Responsible disclosure and contact
If you notice a security vulnerability or abuse, we ask that you report it to info@noxads.ai before disclosing it publicly. We review good-faith reports and aim to make the necessary fixes within a reasonable time.
