Trust
Our commitments
What you can expect from Codexa on security, privacy, reliability, and honesty. Short, specific, and limited to what we actually do.
Last revised
Security
Generated code runs in isolated sandboxes, secrets are encrypted at rest, and sessions and roles are enforced on the server. Details on the security page. We have no third-party certifications yet and say so wherever it matters.
Privacy
We collect what the product needs to work and describe it in the privacy policy. Prompts and project files are sent to an AI provider only when your operator has configured one and only when you start a run; see the AI policy.
Reliability
Live component status is on the status page. We do not publish uptime percentages because we do not yet have a long enough measured history to make them meaningful.
Honesty
Every feature described on this site is implemented. Where a capability depends on operator configuration (AI keys, GitHub OAuth, payment providers, Vercel, email) the product shows an explicit "not configured" state rather than pretending to work. Roadmap items are labelled as such.
Contact
- Security
- security@codexa.app
- Privacy
- privacy@codexa.app
- Support
- support@codexa.app