Q2 2026 Transparency Report
Status: PRE-PRODUCTION TEMPLATE. Noxys has not yet reached general availability. The metrics in this report use placeholder values marked
TODOuntil real data is available. The structure, commitments and data categories are final and binding.
Disclaimer: This document is a transparency report, not legal advice. It does not modify the contractual obligations defined in the DPA or the Terms. For DPO-grade analysis, consult your privacy counsel.
Reporting period: 2026-04-01 to 2026-06-30 Publication date: 2026-07-15 (planned) Next report: 2026-Q3, due 2026-10-15
1. Scope
This report covers all production processing performed by Noxys SAS for the doc.noxys.cloud, app.noxys.cloud and api.noxys.cloud services, including:
- the Noxys browser extension (Chrome MV3, Edge, Firefox)
- the Noxys console (admin SaaS)
- the Noxys public API
- the policy engine and the AI service catalog
Self-hosted deployments are out of scope — the customer is the controller and processor on their own infrastructure.
2. Data categories
Noxys processes the following data categories, per the principle of minimisation (RGPD article 5(1)(c)).
| Category | Description | Retention | Storage class | Tier |
|---|---|---|---|---|
| Aggregate metrics | Counts of interactions, signals detected, blocks per tenant | 24 months | aggregate (no PII) | All |
| Hashed signals | SHA-256 of redacted Risk Signal patterns + category | 12 months | hashed | Free / Pro / Ent |
| Redacted prompts | Prompts with all detected Risk Signals replaced by placeholder tokens | 90 days | redacted | Pro / Ent |
| Raw prompts | Original prompt text | NEVER (default) | N/A | Ent on request, opt-in only |
| User identifiers | Email + tenant ID for IAM | per tenant retention | encrypted | All |
| Audit logs | Admin actions in the console | 24 months (per ADR-013) | encrypted | All |
| Billing data | Stripe customer ID, subscription state | as required by accounting law (10 years FR) | encrypted | Pro / Ent |
| Support tickets | Email body of support communication | 24 months | encrypted | All |
The default prompt-storage class for every tenant is redacted (Pro/Ent) or hashed (Free). Raw storage is opt-in only and requires per-tenant KMS, customer-controlled keys, and contractual sign-off (per Memory: prompt storage tiers).
3. Zero-raw-prompt commitment
Noxys does not store raw prompts by default.
Technical proof points:
- Architecture — the extension performs Tier 1 detection in-browser; only metadata + redacted preview reach the backend. See platform/architecture.
- Schema — the
ai_interactionstable has noraw_promptcolumn. The optionalraw_prompt_blobcolumn exists only when a tenant has explicitly opted into raw storage and is encrypted at rest with a tenant-controlled KMS key. - Audit — quarterly internal review of the Risk Signal pipeline; OpenAPI specs for every endpoint declare what is accepted and persisted (see API reference).
- Retention — automated jobs delete redacted prompts beyond 90 days; deletion is logged and verifiable.
- Right to verification — Enterprise customers can request a SOC2-Type-II-style attestation under NDA.
4. Sub-processors
Sub-processors are listed in legal/sub-processors. Q2 2026 changes:
- TODO: enumerate any new sub-processor onboarded during the quarter
- TODO: enumerate any sub-processor offboarded
5. Government & law-enforcement requests
| Type | Count | Granted | Denied | Challenged |
|---|---|---|---|---|
| French requests (CPCE article L.34-1) | TODO | TODO | TODO | TODO |
| EU member-state MLAT | TODO | TODO | TODO | TODO |
| US (FISA / NSL) | 0 | 0 | N/A | N/A |
| Other | TODO | TODO | TODO | TODO |
Noxys is incorporated in France, has no US presence, and is not subject to the CLOUD Act or Section 702 of FISA directly. We will report any future requests in this section.
6. Security incidents
| Date | Severity | Affected tenants | Disclosure | Remediation |
|---|---|---|---|---|
| none in scope of this report | — | — | — | — |
Noxys commits to disclosing any incident affecting customer data within 72 hours of detection. The methodology and definitions follow the responsible disclosure policy.
7. Key metrics
All numbers below are placeholders until Noxys reaches GA.
7.1 Volume
| Metric | Value |
|---|---|
| Tenants active in quarter | TODO |
| Interactions processed | TODO |
| Risk Signals detected | TODO |
| Block actions enforced | TODO |
| Coach actions delivered | TODO |
7.2 Risk Signals by category
| Category | Detected | Blocked | Coached |
|---|---|---|---|
| PII | TODO | TODO | TODO |
| Secrets | TODO | TODO | TODO |
| Source code | TODO | TODO | TODO |
| Strategic IP | TODO | TODO | TODO |
| Confidential | TODO | TODO | TODO |
| Shadow AI | TODO | TODO | TODO |
7.3 Service health
| Metric | Target | Actual |
|---|---|---|
| API uptime | 99.9% | TODO |
| Console uptime | 99.5% | TODO |
| p50 detection latency | <50ms | TODO |
| p99 detection latency | <250ms | TODO |
8. User rights exercises (RGPD)
| Right | Requests received | Granted | Denied | Median resolution time |
|---|---|---|---|---|
| Access (art. 15) | TODO | TODO | TODO | TODO |
| Rectification (art. 16) | TODO | TODO | TODO | TODO |
| Erasure (art. 17) | TODO | TODO | TODO | TODO |
| Portability (art. 20) | TODO | TODO | TODO | TODO |
| Objection (art. 21) | TODO | TODO | TODO | TODO |
9. Methodology & next report
- All metrics are aggregated from telemetry that does not include prompt content.
- Counts are deduplicated per tenant per UTC day.
- Numbers will be backed by an internal data warehouse audit log once GA is reached.
10. Contact
Questions about this report:
- privacy@noxys.eu — DPO and privacy questions
- security@noxys.eu — security incidents (PGP on Trust Center)
- transparency@noxys.eu — corrections and data requests for this report
Versioning: the structure of this report is versioned in git alongside the documentation; the canonical history is at https://github.com/noxys-eu/noxys-doc/commits/staging/docs/transparency/.