We take data protection and doing things properly seriously. Here's who we are, how we handle data, and the documents you'll want if you're checking us out.
Registered with the Information Commissioner's Office for data protection · reference ZB975060
Nexus Network Ltd, registered in England & Wales · company number 16377446
Where a client uses the Academy and the Hermes AI agent for their own staff, the client is the data controller and we act as their processor under the DPA above. Our security measures include encryption in transit and at rest, role-based access control, strict per-client (tenant) isolation, hashed passwords, encrypted backups, and least-privilege administrative access. Full detail is set out in Annex 2 of the DPA.
Build Studio. Tools your team builds are sealed by default — they run isolated and cannot reach the internet or send data out. You choose whether a tool ever connects beyond your walls, and you own the data and sources of truth you add. We provide the framework and safeguards; we are never the source of record for your content.
We use a small number of trusted providers to run the service (including Anthropic for AI processing, and UK/EU/US hosting and email providers), each under appropriate data-transfer safeguards. The complete, current list — with purpose, location and safeguard — is in Annex 3 of the DPA. We give clients 30 days' notice of any change.
Data protection and legal enquiries: david.brooks@nexusgrowth.net. You also have the right to complain to the ICO at ico.org.uk/make-a-complaint.