Data security & privacy

Research data is sensitive by nature. Crux is built so that your data stays yours.

No model training

Your data is never used to train or improve AI models. AI processing goes through API endpoints whose terms exclude training use, and processing is ephemeral — providers don't retain your prompts or outputs beyond short operational windows.

Tenant isolation

Project data is scoped to your user and organisation at the database level. AI features can only read data inside the authenticated user's current project and organisation; cross-tenant access is not possible by design.

You own your data

• You retain full ownership of everything you upload or create, including AI-generated output produced from your inputs.
• Export your data at any time (PNG/PDF/CSV/JSON per your plan).
• Deleting a project removes its content, files, embeddings, and AI interaction history.

Sharing is explicit

Projects are private by default. Wider access — org sharing or public links — happens only when the owner enables it, and can be revoked at any time. See Sharing projects.

Infrastructure

Crux runs on established managed infrastructure (Vercel hosting, Neon Postgres, Clerk authentication) with encryption in transit. Payment details are handled by the billing provider and never touch Crux servers.

Related

• AI safety & content filtering
• Terms of use — the full legal terms and data practices.