Your data, handled with engineering discipline

We build systems that handle sensitive data for banks, hospitals and exchanges — so we hold our own data practices to the same standard. This page explains what we collect, why, and how it's protected. Last updated July 2026.

Our commitment

Privacy is part of the architecture

Ephraix builds AI, blockchain and FinTech platforms that handle regulated, sensitive data every day. We apply the same security discipline to our own systems — encrypting data by default, limiting who can access it, and never sharing more than what's operationally necessary.

Encryption everywhere

Data is encrypted in transit (TLS) and at rest across every environment we operate.

Role-based access controls

Internal access to client data is scoped by role and reviewed on a regular cadence.

Redundant data backups

Automated, encrypted backups run on a schedule with periodic restore testing.

Compliance-aware builds

Client work is scoped against GDPR, SOC 2 and HIPAA requirements where applicable — spanning our HealthTech and FinTech engagements.

Regular security audits

Infrastructure and codebases go through periodic internal review and external penetration testing.

Employee security training

Engineers are onboarded with data-handling and security practices before touching client systems.

Incident response plan

A documented process governs how we detect, contain and disclose any security incident.

Data minimization

We only ever collect what a project actually needs, and nothing more.

The details

What we collect & how it's used

In plain language — no legalese.

Information we collect

When you reach out through our contact form, we collect what you give us directly:

Name
Email address
Phone number
Service you're interested in

How we use it

Contact details are used only to respond to your enquiry — scoping the project, sending proposals, and following up on active conversations. We don't use it for anything beyond that relationship.

Third-party sharing

We don't sell or share your information with third parties. Data is only passed to the operational tools we use to run the business (e.g. email delivery, project tracking) — never for marketing or resale.

Cookies & analytics

This site may use basic, privacy-respecting analytics to understand overall traffic patterns. We don't run cross-site ad tracking or sell browsing data.

Questions?