Trust center

Security built into every deploy

LineXa deploys into your cloud, not ours. We designed the platform so that it holds as little of your access and data as possible, and so that you can see and revoke what it does.

Access to your cloud

Your cloud, your keys, your call.

Many deployment tools ask you to upload a cloud key. LineXa doesn't store one. It acts through a dedicated service account using short-lived credentials, limited to the role you install in your own project.

  • Nothing to leakNo long-lived customer key sits on LineXa's servers
  • ReviewableThe role's permissions are published in plain text
  • RevocableRemove the role and LineXa's access stops immediately
Security practices

How we protect your workspace

No stored cloud keys

LineXa keeps no key to your Google Cloud project. It acts through a dedicated service account with short-lived credentials, which you can revoke at any time.

Least-privilege role

You grant a LineXa role whose permissions are published in plain text, so your security team can review exactly what LineXa can do.

Isolated workspaces

Every workspace has its own database, and DEV, STAGE and PROD are kept apart, each tied to its own Google Cloud project.

Encrypted in transit

All traffic uses HTTPS with HSTS, and the studio is served with a strict Content Security Policy and hardened security headers.

Protected sign-in

Passwords are stored only as salted bcrypt hashes, and sign-in attempts are rate-limited to slow down guessing.

Monitored around the clock

Deployed environments are health-checked every few minutes. Problems open an incident for the LineXa team, and platform status is public.

Privacy and compliance

A French company, European by default.

LINEXA CONSULTING is registered in France and handles personal data under the GDPR. New projects deploy to an EU region unless you choose otherwise, and the resources LineXa creates stay in your own cloud account.

  • GDPRYour rights and our commitments are in the Privacy policy
  • Data minimisationLineXa stores your canvases and settings, not your application data
  • TransparencyIncidents are tracked, and platform status is public

Security questions?

Send us your questionnaire or ask about a specific control. We answer in plain language.