Trust and data
What we do with what you share.
Plain statements, including the ones about what we do not claim.
How we handle data
What we do, in plain terms.
- Data we hold
- We keep only what a project needs, agree retention with you in writing and delete on request at the end of an engagement.
- Who can see it
- Access is limited by role and each person’s need. Our internal console requires individual logins.
- In transit and at rest
- Everything is served over HTTPS. The systems we build for clients use encryption in transit and, where the platform supports it, at rest.
- Backups
- For client systems, backups and a tested restore are part of every build.
- Our website
- No cookies, no analytics and no trackers. Fonts, images and scripts come from our own server. The voice agent contacts its speech provider only when you start a conversation.
- Our AI agents
- They answer from information you approve, say what they are, escalate to a person and keep a record. Conversations may be processed by our speech and language providers, named below, and are stored so our team can follow up.
- Providers we use
- Our website and console run on our own server in Frankfurt, Germany. Our voice agent uses ElevenLabs for speech and language handling. We tell you which providers touch your data before a project starts.
- Agreements
- We sign NDAs and data-processing agreements, ours or yours, before we see anything sensitive.
What we do not claim
No badges we have not earned.
We do not currently hold formal certifications such as ISO 27001 or SOC 2, and we are not a regulated medical, legal or financial service. We do not claim to be HIPAA or PCI compliant.
What we do is build to your requirements, document the controls, work within your compliance process and tell you plainly where a regulation needs a specialist. If your project needs a certified environment, we say so on the first call.
Found a vulnerability? Email support@devraxo.com. We read every report and reply within one working day.
Straight answers
Trust questions, answered.
Is my data safe?
We minimise what we hold, restrict access by role, keep audit trails and agree data handling in writing. Our own site sets no cookies and loads nothing from third parties when you visit; the voice agent connects to its speech provider only when you choose to start a conversation. We do not claim certifications we do not hold.
Do you sign NDAs and data-processing agreements?
Yes, ours or yours.
Are the case studies real clients?
The ones labelled “Built by us” are real products we run. The ones labelled “Concept build” are fictional brands we designed to show what a build looks like, with modelled numbers and the assumptions shown. We do not present either as client results.
Which languages do your agents support?
Our voice and chat agents work in any language your customers speak. English, Urdu and Arabic are the ones we test most; for any other language we test with native speakers before launch and report the results honestly, including where accuracy is lower.
Start here
Tell us what you need built. We will show you before you pay.
Describe it in your own words. A person reads it, and for most projects you get a free mockup within one working day.