SECURITY FAQ
Security questions,
Security questions,
answered directly.
Data, access, logs, models, updates, hardware, certification and retirement, in one to three sentences each.
Your data.
- Does Matrix connect to the internet?
- Not in the standard setup. If your IT team enables outside access, agents make outgoing requests only to approved services, to read or, where needed, send. Requests carry what the agent sends. Matrix accepts no requests from outside your company network.
- Does Synexas ever see our data?
- Synexas staff do not view or receive working data during use, setup or support. Optional custom-workflow proofs use data you authorize under an NDA; we delete it afterwards. Confidential data is allowed; personal data needs a lawful basis you confirm. You choose your site or our offline environment. On-site work happens with your staff present.
- Is our data used to train models?
- No. Models change only through an update you approve, or a tuning project you ask for, done on site.
- Can Matrix connect to our internal systems without the internet?
- Internal integrations can run on your network. We confirm compatibility and access requirements during scoping.
Access and accounts.
- Who holds the administrator accounts?
- Your team holds every account. Synexas keeps none.
- Can Synexas access our system remotely?
- No remote access to your working data is offered. Our engineers work on site only when invited, with access your team grants and removes.
- Can Matrix use our directory for sign-in?
- MFA protects sign-in. We confirm directory integration and compatibility for your environment during scoping.
- Can admins read employees’ conversations?
- Each person opens only their own conversations in Matrix. Your team holds the administrator and system accounts.
Logs, models
and updates.
- What does Matrix record, and can we retrieve it?
- Review and export local audit logs of queries, administration and maintenance. Event scope, retention and formats are agreed with your team.
- Which models can we use?
- Open-weight models of your choice, including models from US developers. Any license terms that affect your use are discussed with you during setup.
- How are updates delivered and checked?
- Signed offline update packages are checked by the installer before installation; invalid signatures are rejected. Your administrator decides when to install, with guidance from Synexas.
Hardware, certification
and retirement.
- Where is the hardware built?
- Assembly and component details are provided for your selected configuration at signing.
- Does Synexas have SOC 2 or ISO 27001?
- Synexas does not hold a SOC 2 report or ISO certification. Deployment controls and evidence are agreed with your team, not certified here.
- Does Matrix make us HIPAA or FINRA compliant?
- No. Matrix supports specific controls; your organization remains responsible for compliance. See the controls mapping, the HIPAA guide and the FINRA guide.
- What happens when we retire a system?
- Data drives stay with your team. You arrange data clearing or destruction; Synexas provides guidance.
Have a question not listed here? Ask for the security review kit, or email us.
More on security.
Let’s make AI useful.
For your actual work.
Tell us about a job your team repeats, not your confidential files. We’ll show you how Matrix handles work like it.
Request a demo