Who can see what.
Set by your team.
Encrypted storage, MFA, roles, local audit logs and signed updates. We configure the controls around your requirements and agree acceptance criteria with your team.
MFA and rolesEncrypted storageLocal audit logs
Two roles,
and what each one can do.
| User | Administrator | |
|---|---|---|
| Use workspace apps | Yes | Yes |
| See files shared with them | Yes | Yes |
| Create and remove accounts | No | Yes |
| Manage settings in the admin console | No | Yes |
Data and access controls,
managed by your team.
-
Each person sees their own files
Each person sees only the files and projects they are allowed to.
-
Files stay private until shared
Files stay private to their owner until shared.
-
MFA for sign-in
A second factor protects access to the system; identity integration is confirmed for your environment.
-
Audit logs kept locally
Queries, administrative changes and maintenance events can be reviewed and exported on your system.
-
Encrypted customer storage
Customer data is encrypted at rest. Key management and access responsibilities are agreed with your team.
-
A named person confirms
Write-backs to your systems and outgoing results wait for a named person to confirm.
-
Maintenance by invitation
Our engineers work on site only when invited, with access you grant and remove.
-
Signed offline updates
The installer verifies package signatures before installation and rejects invalid signatures. Your team chooses when to update.
How Matrix supports
your controls.
Matrix does not make your organization compliant, and Synexas holds no certifications. These tables identify supported control areas, not proof of complete compliance. Requirements, evidence and acceptance are agreed for your intended use.
NIST SP 800-53 Rev. 5
| Control area | What Matrix provides | What stays with you |
|---|---|---|
| Access Control (AC) | Role-based access, private-by-default files | Access policy and periodic reviews |
| Audit and Accountability (AU) | Local audit logs with review and export | Retention, review and export |
| Identification and Authentication (IA) | MFA and role-based access | Identity policy and any directory integration |
| System and Communications Protection (SC) | No internet connection by default; wired network only | Segmentation, firewall rules and any outside service you approve |
| Maintenance (MA) | On-site maintenance by invitation | Approval and supervision |
| Media Protection (MP) | Data stays on system storage; retirement options | Media handling and destruction |
| Configuration Management (CM) | Versioned offline updates | Change approval |
HIPAA Security Rule, 45 CFR 164.312
| Control area | What Matrix provides | What stays with you |
|---|---|---|
| Access control | Unique user accounts, role-based access | Access policies and emergency access procedures |
| Audit controls | Local audit logs with review and export | Required events, retention and review |
| Integrity | Source references and workflow approval gates | Data integrity policies |
| Person or entity authentication | Individual sign-in with MFA | Authentication policy |
| Transmission security | Nothing leaves your network unless you approve an outside service | Network protection, including any outside service you approve |
Whether a business associate agreement is needed depends on your situation. Ask your counsel.
Financial services: GLBA Safeguards Rule, 16 CFR Part 314
| Control area | What Matrix provides | What stays with you |
|---|---|---|
| GLBA Safeguards Rule: access controls | Role-based access | Your information security program |
| GLBA Safeguards Rule: monitoring and logging | Local audit logs with review and export | Monitoring and review |
| GLBA Safeguards Rule: service provider oversight | Synexas never receives customer information, except for a proof you authorize | Vendor oversight records |
| Books and records (SEC Rule 17a-4, FINRA Rule 4511) | Conversation history and logs on the system | Required retention and records storage remain yours |
Approval gates.
Nothing important happens without a person’s approval, and every step leaves a record.
- AI prepares
- Evidence attached
- Person approves
- Logged on site
More on security.
Let’s make AI useful.
For your actual work.
Tell us about a job your team repeats, not your confidential files. We’ll show you how Matrix handles work like it.
Request a demo