Security
Security practices for controlled growth operations.
NoxAds approaches security through scoped access, reviewable workflows, and careful handling of business and campaign context.
Access control
NoxAds approaches access with least-privilege principles. Project access should be scoped to the systems, accounts, files, and permissions needed for the agreed work, and access should be removed or reduced when it is no longer needed.
For client-owned platforms, the client remains responsible for account ownership, internal permissions, billing access, and administrative recovery. NoxAds can work within delegated roles where the platform supports them.
Operational review
Campaign changes, messaging workflows, AI outputs, and production assets can affect spend, reputation, and customer experience. Security therefore includes operational review, not only technical controls.
High-impact actions should have a clear owner, documented context, review state, and approval path before launch. This helps reduce accidental changes, unclear responsibility, and unreviewed automation.
Data and incident handling
Project data should be shared through appropriate channels and limited to what is needed for the workflow. Sensitive customer data, credentials, financial exports, or private business documents should be scoped before transfer and avoided when not required.
If a security concern appears, NoxAds will prioritize containment, impact review, communication with affected stakeholders, and follow-up actions. Reports can be sent to info@noxads.ai with enough detail to reproduce or assess the concern.
