This framework is prepared for review. Future service controls and proposed periods are not yet verified as implemented. Publication does not establish legal compliance or activate customer document processing.
Current confirmed controls
The public website is delivered over HTTPS. It has no application customer database, upload facility, payment processing or live AI API. The source does not expose an AI API key. These observations do not constitute a security audit of the hosting infrastructure.
Access and tenant separation requirements
Before customer services launch, require authenticated access, server-side authorisation and customer separation on every data operation. Assign individual staff accounts, enforce appropriate multifactor authentication, review privileges and revoke access when roles change. Frontend-only hiding of controls is not an access-control mechanism.
Storage and application requirements
Protect information in transit and at rest; manage keys and secrets on the backend. Validate uploads, restrict accepted file types, set size limits and scan files where appropriate. Keep dependencies maintained. Validate inputs, prevent unintended disclosure in logs and make backups recoverable only to authorised users.
Operational assurance
Assign security ownership, perform risk reviews and supplier checks, test recovery, monitor relevant events and record remediation. Validate security and privacy controls before real client documents are accepted. No security certification, penetration-test result, regional hosting location or recovery guarantee is claimed by this policy.
Expert human verification.
Human verification by a suitably qualified expert is an integral part of every Vexido management system implementation or transition package. Proposed findings and draft documents must be verified before release as expert-reviewed deliverables.
The engagement scope will identify the reviewer’s competence, review stages, deliverables and responsibilities. Expert review does not guarantee compliance or certification and does not replace the certification body’s decision.
The free browser-only project planner is a planning tool, not a reviewed service package. Its output has not undergone expert verification.
Contact the operator
VEXIDO PUBLICATIONS LLP · Limited Liability Partnership registered in India
Bramha Majestic, NIBM Road, Kondhwa Khurd, Pune 411048, India
vexidopublications@gmail.com