Secure by Design

Secure by Design for the Enterprise

Every CXO today is balancing innovation with risk. You want to move fast with AI, but you can’t compromise on trust, governance, or compliance. Rox was built with that in mind. Security isn’t an add-on for us — it’s part of the foundation. From how data is stored, to how models are used, to how the platform is deployed, Rox is secure by design.

Your Data, Your Warehouse

Rox is warehouse-native. We can run directly in your warehouse so it stays the system of record, with data never leaving your VPC. In this setup, only compute runs in Rox’s VPC. There’s no ETL, no unnecessary copies, and no expanded attack surface. For customers who prefer, Rox can also operate outside the warehouse — giving you flexibility while keeping governance simple and your data strategy intact.

Zero Retention, Full Control

All model providers we work with run under strict zero-retention policies. That means prompts, outputs, and metadata are never stored or used for training — once a request is served, it’s gone. Your data lives only where you intend it to. And if your team is building or training its own models, Rox can work with you to integrate them securely — while still enforcing the same guardrails and governance.

Stay in Control, Stay in Region

For enterprises with residency or regulatory needs, Rox supports in-VPC deployments and in-region options. Your data doesn’t have to cross boundaries you don’t allow.

Governance You Can Trust

Data is isolated with strong tenancy boundaries, granular access controls, and full audit trails. Rox is SOC 2 Type II certified, giving you confidence that governance and compliance aren’t left to chance.

Secure AI, Not Just Smart AI

Rox tests and enforces guardrails so agents don’t expose customer data unnecessarily. LLMs never get raw access — everything is mediated at the platform layer. Authentication and authorization always sit with the user, not the model.

Defense at Every Layer

We run a defense-in-depth approach: network segmentation, monitoring, anomaly detection, automated recovery, and continuous testing. The platform is designed to stand up to real-world conditions and evolve with new threats.

Security Is Culture, Not a Checkbox

Security is everyone’s job at Rox. Engineers are trained to build with it in mind, our pipelines enforce it automatically, and our processes are built around it. That means security isn’t a last step — it’s baked in from the start.

Rox is committed to the privacy and security of its users. Customer data processed through the Rox platform is encrypted in transit and at rest using AES-256 encryption and is never used to train generalized machine learning models. Rox maintains SOC 2 Type II compliance and undergoes independent third-party security audits on an annual basis. All AI-generated outputs, including but not limited to prospect recommendations, message drafts, meeting summaries, and pipeline scoring, are provided for informational purposes and should be reviewed by authorized personnel before any action is taken. Performance metrics referenced on this website, including pipeline generation figures, response rates, and revenue impact, reflect results reported by individual customers under specific configurations and may not be representative of all deployments. Actual results will vary based on factors including but not limited to data quality, CRM configuration, outreach volume, market conditions, and target audience. Rox does not guarantee specific revenue outcomes. The Rox platform integrates with third-party services including Salesforce, HubSpot, Gmail, Microsoft Outlook, Slack, and others; availability and functionality of third-party integrations are subject to the respective providers' terms of service and may change without notice. Features described as "autopilot," "autonomous," or "automated" operate within user-defined parameters and require initial configuration and ongoing oversight. Rox, the Rox logo, and "Revenue on Autopilot" are trademarks of Rox Data Corp. All other trademarks are the property of their respective owners. Service availability is subject to the terms outlined in your enterprise agreement. For questions regarding data processing, compliance certifications, or platform capabilities, contact security@rox.com.