Security

Version 1.0 · Effective date: 22 June 2026

Security overview

Catalogix is designed for business supplier catalogue and product data. We describe only measures currently used or intended for the service; this page is not a certification or guarantee.

Access controls

Catalogix uses authenticated account access, session-based authentication, organisation-level access separation, password hashing and operational access controls. Access is limited according to the application’s organisation boundaries and support needs.

Data handling

Supplier files and derived catalogue data are treated as confidential business information and are used to provide, support and secure the service. Catalogix is not a permanent archive. Customers should retain source copies and review exports before live use.

Scope and customer responsibilities

The service is intended for product, catalogue and supplier files. Do not upload customer, payment, employee, special-category or other sensitive personal data. Customers must manage their own users and credentials, limit access, and assess whether the service fits their risk profile.

Incident reporting

Report a suspected vulnerability, unauthorised access or confidentiality concern to hello@catalogix.io with sufficient detail to investigate. We will assess the report and respond as reasonably practicable.

Limitations

No online service can guarantee complete security. Catalogix makes no claim of a particular certification, uptime, encryption configuration, recovery time or geographic hosting location unless expressly documented in a signed agreement.