Is it safe to use AI on our security evidence?
Yes. CyConex screens evidence for prompt-injection and jailbreak content before embedding, applies sensitive-data rules to sanitise content before it reaches the model, and hosts everything in UK Azure regions with encryption at rest, including org Transit KEK / HashiCorp Vault options. AI usage is auditable and qualified assessors retain sign-off.
Where is CyConex hosted?
CyConex is hosted in UK Azure regions. Customer evidence, assessment outputs, and platform metadata are stored and processed within the United Kingdom, supporting organisations with UK data residency requirements.
Does CyConex replace human assessors?
No. AI agents accelerate evidence gathering and review, but accountability stays with qualified assessors. Reviewers validate scope, review IGP judgements, and approve every output that goes into a formal report, so conclusions remain defensible.