Shared responsibility

Area	Nexo responsibility	Customer responsibility
Product	Provide documented software behavior, secure defaults where stated, and supported updates	Select supported versions and apply updates
Configuration	Validate and distribute supported pipeline configuration	Design, review, test, and approve policies
Identity	Provide product access controls and supported secret integrations	Manage users, roles, database identities, and secret lifecycle
Network	Document required flows and supported TLS options	Configure segmentation, DNS, firewalls, certificates, and exposure
Data	Process traffic according to configured policies	Classify data and configure handling, retention, backup, and recovery
Operations	Expose documented health and diagnostic signals	Monitor, alert, scale, test failures, and execute incident response
Compliance	Provide accurate product documentation and available evidence	Determine applicability, implement controls, and obtain independent assurance

Never infer a compliance certification, performance level, or service commitment unless it is explicitly published in a current agreement or trust document.