What we don't promise

Authentication is a security boundary. If you are choosing infrastructure to sit on that boundary, the useful question is not what a vendor promises — it is what they decline to promise. This page is the second list.

Nothing here reduces the commitments in our Terms of Service. It sets out the limits of what Neuctra Authix does, so you can decide with the real picture rather than the marketing one.

Neuctra Authix, its SDKs and its documentation are provided “as is”, without warranty of any kind. We do not warrant that the service will be uninterrupted, timely, secure or error-free, or that defects will be corrected.

We work to keep the service available and we monitor it, but there is no service level agreement and no uptime guarantee on any plan, including paid ones. Design your application to survive the API being unreachable.

Using Neuctra Authix does not make an application secure. It handles a specific set of problems well and leaves the rest to you.

Neuctra Authix holds no compliance certification. We are not SOC 2 or ISO 27001 certified, we have not been independently audited, and we are not a HIPAA business associate. We do not offer a signed data processing agreement as a standard product feature.

If you operate under GDPR, the UK GDPR, CCPA or a comparable regime, you are the data controller for your users. Meeting those obligations — lawful basis, notices, consent, responding to data subject requests — is your responsibility. See the Privacy Policy for how the roles divide.

• Code samples are illustrations. They are written for clarity, not for production. They generally omit error handling, retries, input validation and logging. Read them, then write your own.
• Documentation can lag the API. Where the two disagree, the API's actual behaviour is authoritative — tell us and we will fix the page.
• Performance figures are indicative. Anything we publish about latency or throughput depends on your region, payload size, query shape and network. Measure with your own workload before committing to a design.
• Plan limits are enforced as documented, but the practical capacity of an application built on Neuctra Authix depends on how it uses the API.

Nothing on this website or in our documentation is legal, regulatory, financial or professional security advice. Descriptions of GDPR, HIPAA, PCI-DSS or any other regime are general context to help you ask the right questions, not an assessment of your situation. Consult a qualified professional about your own obligations.

Neuctra Authix runs on infrastructure operated by others — listed in the Privacy Policy — and an outage or security incident at one of them can affect the service. We choose these providers carefully; we do not control them.

Links to external sites are provided for convenience. We do not endorse them and are not responsible for their content, their practices or their privacy policies. Product names and trademarks belong to their respective owners, and referring to one does not imply any affiliation or endorsement.

Questions about anything on this page: [email protected]. To report a security issue: [email protected] — please give us a reasonable chance to fix it before disclosing it publicly.

Operated by [registered company name], [registered address].