NEUCLON
Home / Trust center
Trust center

Security, architecture and governance, in plain terms.

What is in place today, who owns your data and how AI is used. A list of sub-processors is available on request. Last reviewed 23 October 2026. Need a security questionnaire completed? Ask us or call +1 855 963 8256.

At a glance

Controls in place today

Security controls

  • Each company in its own isolated workspace at its own address
  • HTTPS everywhere; session cookies are HttpOnly and Secure
  • Passwords hashed with scrypt; sessions, API keys, invitations and reset links stored only as hashes
  • Secrets (channel addresses, source tokens, storage keys) encrypted at rest with AES-256-GCM and never sent to the browser
  • Roles: admin, builder, member, plus approver rights
  • Anything that leaves the company waits for a person's approval
  • A full audit trail of changes, approvals and settings
  • Outgoing webhooks signed with HMAC-SHA256
  • Export the whole workspace at any time; delete it for good
Architecture

How Neuclon fits with your systems

One application server, one database per installation with each company isolated, and a governed path for everything that comes in or goes out. Claude does the reasoning; Neuclon's engine validates every tool and computes every number.

Neuclon architecture People use the Neuclon app over HTTPS at their company's address. The Neuclon application server holds the engine, agents, approvals and audit trail, stores data in an isolated workspace per company and files in Neuclon storage or the company's own cloud storage, and calls Claude by Anthropic for reasoning. Your systems send data in through sources and the REST API; approved messages go out to Slack, Teams, email and webhooks. Your people Browser, HTTPS acme.neuclon.com roles and approvals Your systems ERP, MES, TMS, WMS spreadsheets, forms webhooks in (sources) REST API with keys Neuclon application server Tool engine: validated specs, rules, exact answers Agents with autonomy levels and guardrails Approvals and audit trail Database · each company isolated Files: Neuclon storage, or your Azure Blob, Amazon S3 or Google Cloud Claude by Anthropic reasoning via API no training on API data Out, after approval Slack, Microsoft Teams email, signed webhooks Word, PowerPoint, Excel Where it runs Neuclon cloud, or your Azure subscription, or your own servers
Deployment and data

Where your data lives, and who owns it

Neuclon cloud

app.neuclon.com and your company's own address, managed by Neuclon. Each company is isolated in its own workspace. Free 30-day trial, then per person.

Your Azure subscription

For enterprise and design partners: the same application deployed into your Azure tenant from our templates (App Service, database and Blob Storage), so your database and files stay in your environment. Scoped with you.

Your own servers

Neuclon runs as one Docker container with a standard database. For organizations that must host software themselves. Scoped with you.

You own your data

Tools, records, files, agents and rules belong to your company. Admins can export the whole workspace at any time and bring it into another installation, or delete the workspace permanently. When a trial ends, the workspace becomes read-only; nothing is deleted.

How AI is used

In every deployment, including one in your own Azure subscription, your database and files stay where Neuclon is deployed, while the requests the AI works on are processed by Anthropic, the provider of Claude. Neuclon sends Claude only what a task needs: a request, the tool's design and the records involved. Under Anthropic's commercial terms, data sent through its API is not used to train its models by default. Numbers in answers are computed by Neuclon's engine from your records, not generated by the model. Agents act only within the autonomy level and limits you set, and every step is logged.

Integrations

Integration catalog

Can you connect SAP or Salesforce today? Yes, through their APIs or a custom adapter built with our consulting partners. The catalog below shows exactly how each kind of system connects.

System or methodDirectionHow it connects
Excel, CSV, Word and PDF import with field mappingInNative, self-serve
Slack and Microsoft Teams channelsOutNative, self-serve
Email, including approved emails to customersOutNative, self-serve
Azure Blob Storage, Amazon S3, Google Cloud Storage, with nightly backupsStorageNative, self-serve
Google Drive and OneDriveInNative, set up with your own app registration
Any system that can send a webhook (forms, Stripe, Shopify, telematics, TMS)InWebhook source, self-serve
Any system that can receive a webhook, signed and sent after approvalOutWebhook action, self-serve
Zapier, Make and n8nIn and outWebhooks and REST API, self-serve
Your own applications and scriptsIn and outREST API with keys, self-serve
ERP and accounting: SAP, NetSuite, Dynamics 365, QuickBooks, XeroIn and outTheir APIs or a custom adapter, with our consulting partners
CRM: Salesforce, HubSpotIn and outTheir APIs or a custom adapter, with our consulting partners
MES, QMS and plant systems; IoT and sensor dataInCustom adapter or Azure IoT, with our consulting partners
Databases: SQL Server, Oracle, PostgreSQL, Snowflake, DatabricksInRead-only connection or scheduled export, with our consulting partners
Support and commercial terms

What you can expect from us

Support

Email and phone support on US business days at +1 855 963 8256. Design partners and Sprint clients have a named contact at Neuclon.

Subscription

Free 30-day trial for up to 5 people with no card. Then Team at $25 or Business at $45 per person a month, or Enterprise on a written agreement. Compare plans.

Services

The 30-day Sprint and other services are fixed-fee or scoped engagements from Neuclon Consulting, confirmed in a written proposal and separate from the subscription. See the Sprint.

Have a security review to complete?

Send us your questionnaire. We answer it from the controls in place today.

Talk to usHow Neuclon compares