Security

This page describes how CLARIX protects your data in plain language. We aim to be accurate and we will not claim certifications we do not hold.

Encryption

Traffic to CLARIX is served over HTTPS (TLS), and your meeting audio, transcripts, and derived output are stored with encryption at rest by our cloud storage and database providers. Integration tokens are additionally encrypted in our application before storage.

Your data, your control

You own your meetings and the output CLARIX generates. You can delete a meeting at any time, which removes its audio, transcript, and derived data. We do not sell your data, and we do not use your meeting content to train our own models.

Subprocessors

To deliver the service we rely on trusted providers for authentication, cloud hosting and storage, speech-to-text transcription, AI summarization, payments, and transactional email. Each processes data only to perform its function on our behalf.

Access & isolation

Data is scoped to your workspace and only accessible to authenticated members of that workspace. Calendar connections are read-only — CLARIX never creates, edits, or deletes your events.

Compliance status

CLARIX is an early-stage product and is not currently SOC 2 or HIPAA certified. We will only state such certifications here once they are independently verified. If your organization requires a BAA or a specific compliance posture before adopting CLARIX, contact us to discuss timelines.

Reporting a vulnerability

If you believe you’ve found a security issue, please reach out to your CLARIX workspace administrator or the email associated with your account so we can investigate.